Moke Token and LpdFi exploited for $1.6M via reserve manipulation on PancakeSwap.
Security & Exploits ·
Moke Token and LpdFi were exploited for $1.6M through attacks that manipulated live reserves on PancakeSwap, according to security analysis. The incidents exemplify how attackers weaponize vulnerabilities in decentralized exchange mechanisms to extract value from liquidity pools and connected protocols.
Reserve manipulation exploits target the pricing and balance mechanisms that DEXs rely on to execute trades. By artificially altering the ratio of tokens held in a pool, attackers can trick the exchange's pricing logic into executing unfavorable swaps or allowing unauthorized minting of protocol tokens. This type of attack succeeds when smart contract logic fails to validate pool state independently or when flash loan mechanics are misused to temporarily distort reserves during a single transaction.
The specifics of how each protocol's design flaw enabled the attackers—whether through insufficient input validation, inadequate price oracle protection, or governance token minting vulnerabilities—remain to be fully detailed in technical postmortems. Recovery prospects and whether affected users will receive restitution have not been disclosed.