BCE exploit analysis
BCE's per-block emission credit was readable from the miner's stamp, so the attacker walked the credit out by mining biased timestamps. DeFiHackLabs reconstructs the in-tx mining credit drain.
- Reported loss
- ~800,000 USDT, per DeFiHackLabs
- Occurred
- Logged
- Source
- DeFiHackLabs
Logged as “2026-03-23: Deflationary Token Logic Error on BCE”.
Analysis1 min read
BCE's emission rate credit was a per-block linear formula that the attacker influenced by repeatedly mining at a favourable timestamp. The attacker walked the credit out by mining blocks with biased timestamps and capturing the per-block credit.
DeFiHackLabs reconstructs the sequence against the live state; total loss is captured in the PoC.
What would have prevented it: a per-block emission rate that is fixed at the deploy-time block.timestamp and not influenced by the miner's stamp.
Other exploits
- EST Token exploit analysis 27 Mar 2026
- Univ3CollateralToken exploit analysis 24 Mar 2026
- XocolatlLiquidator exploit analysis 24 Mar 2026
- ATMBlindBox exploit analysis 19 Mar 2026
- Revamp exploit analysis 19 Mar 2026
- Fun.xyz CheckoutPool exploit analysis $86K
Query every incident yourself — free, no signup
Updated 14 Oct 2026. Figures are as reported by the sources listed above and are not independently verified.
The crypto data layer for humans, apps, and AI agents.
