BOSS exploit analysis
BOSS's helper contract mixed mint/burn and transfer-tax pool reads, so repeated helper cycles inflated one side of the pool's reserves. DeFiHackLabs reconstructs 10,207.54 USDT drained on BNB Chain.
- Reported loss
- 10,207.54 USDT, per DeFiHackLabs
- Occurred
- Logged
- Source
- DeFiHackLabs
Logged as “2026-06-06: Boss Helper Mintburn And Transfer Tax Pool Skew on BOSS”.
Analysis1 min read
The project's helper contract mixed mint/burn and transfer-tax pool accounting, letting an attacker run repeated cycles that minted against one side of the pool and swapped the other. Each cycle increased the helper's recorded balance relative to the pool's actual token balance, allowing the attacker to drain the pool against an inflated balance.
DeFiHackLabs reconstructs the sequence against the live BNB Chain state; the drain is in 0x96d1a0175eb4a82585db62a374518391f6b575a07c25c0e2874ca82400b830c7 on BscScan for a total loss of 10,207.54 USDT. The audit_911 alert corroborated.
What would have prevented it: separating the mint-burn and transfer-tax pool accounting into distinct reads, so neither side sees the other's reserves.
Sources read (3)
Other exploits
- NovaBox exploit analysis 9 Jun 2026
- TOPBPool exploit analysis 9 Jun 2026
- AmbientCrocSwapDex exploit analysis 7 Jun 2026
- AISOTHPresale exploit analysis 5 Jun 2026
- DTXT exploit analysis 5 Jun 2026
- ATM Token exploit analysis 4 Jun 2026
Query every incident yourself — free, no signup
Updated 14 Oct 2026. Figures are as reported by the sources listed above and are not independently verified.
The crypto data layer for humans, apps, and AI agents.
