SKP Token exploit analysis
SKP Token's deposit/stake/getReward triple could be repeated in one block, harvesting all rewards at once against the inflated stake weight. DeFiHackLabs reconstructs the in-tx reward drain on BNB Chain.
- Occurred
- Logged
- Source
- DeFiHackLabs
Logged as “2026-05-26: Deliberately Engineered Drain Insider Exploit Rug Pull on SKP Token”.
Analysis1 min read
SKP Token's reward distribution let the same block combine a deposit, a stake, and a getReward against the same user. The attacker staged many such triples in one block, claiming all rewards at once against the inflated stake weight.
DeFiHackLabs reconstructs the sequence against the live BNB Chain state. The same observed drain transaction 0xbc01ea37bd2ff8f6aa6afcfbe0406114ff27a01e9aa56102bfa4ad8a0c2f25ee on BscScan reported the incident.
What would have prevented it: a per-block cooldown on getReward, or a deposit-then-stake ordering enforced by getReward checking the recorded stake time.
Sources read (3)
Other exploits
- DxSale exploit proof of concept 28 May 2026
- LegendaryMoneyMonNft exploit analysis 28 May 2026
- Joe Agent exploit analysis 27 May 2026
- New Market Trading exploit analysis 25 May 2026
- SquidRouterModule exploit analysis 25 May 2026
- WUSD.fi exploit analysis 25 May 2026
Query every incident yourself — free, no signup
Updated 14 Oct 2026. Figures are as reported by the sources listed above and are not independently verified.
The crypto data layer for humans, apps, and AI agents.
