AIDC token exploit allows attacker to drain 220.12 WBNB from PancakeSwap liquidity pair via sync() function abuse.
Security & Exploits ·
An exploit of the AIDC token on the Binance Smart Chain resulted in the extraction of 220.12 WBNB (approximately $120,929.35) from a PancakeSwap liquidity pair. Security researchers at SlowMist identified the vulnerability as stemming from a flawed burn mechanism in the AIDCToken contract. During sell transactions, the contract accumulates a 30 percent burn obligation but fails to deduct this amount from the seller's balance, instead storing it as debt.
When any non-pair transfer occurs, the accumulated burn debt triggers a function that incorrectly targets the liquidity pair's balance for token destruction rather than the seller. Following this incorrect burn operation, a sync() call artificially deflates the AIDC reserve within the automated market maker, creating an imbalance that permits extraction of reserves.
The attacker's address is 0x89eb2c99e970d831525c7a52badc290afa116b63, while the exploited pair contract at 0x2725033282b3bd4be8873b7f0f622c18e3b7cbd8 served as the victim. The vulnerable AIDC token contract is 0x5021d71859f81b4c905b573591db8f9cc4a0c6fe. The mechanism allowed the attacker to manipulate reserve state repeatedly and execute a final swap that depleted nearly all WBNB from the pair.