EST Token exploit analysis
EST Token's transfer hook credited the receiver with the pre-fee amount, so a same-block deposit-and-receive captured the fee. DeFiHackLabs reconstructs the fee-credit drain.
- Reported loss
- 150.2 WBNB, per DeFiHackLabs
- Occurred
- Logged
- Source
- DeFiHackLabs
Logged as “2026-03-27: Incorrect Token Burn Mechanism on EST Token”.
Analysis1 min read
EST Token's transfer hook applied a fee to outbound transfers, but the receiver was credited with the pre-fee amount. A receiver pre-staged the same-block fee payment by depositing and immediately receiving the same token.
DeFiHackLabs reconstructs the sequence against the live state; total loss is captured in the PoC.
What would have prevented it: a transfer hook whose receiver-credit reads the actual balanceOf after the fee rather than the pre-fee amount.
Other exploits
- PerpPair exploit analysis 5 Apr 2026
- WhalebitOracleManipulation exploit analysis 31 Mar 2026
- VTSwapHook exploit analysis 28 Mar 2026
- Univ3CollateralToken exploit analysis 24 Mar 2026
- XocolatlLiquidator exploit analysis 24 Mar 2026
- BCE exploit analysis 23 Mar 2026
Query every incident yourself — free, no signup
Updated 14 Oct 2026. Figures are as reported by the sources listed above and are not independently verified.
The crypto data layer for humans, apps, and AI agents.
