A post by @CertiKAlert on X.
#CertiKAlert
@CertiKAlert on X
Not investment advice. Muhabbit scores how much a story may matter, not which way to trade.
A flash-loan-funded oracle attack inflated a CoreVault redemption roughly 33×, draining the InsurancePool and netting the attacker 160.26 BNB (~$112.2K) after the trade was reversed, according to CertiK Alert. The exploit relied on borrowed capital to manipulate the oracle price feeding CoreVault's redemption logic, letting the attacker redeem far more value than deposited before unwinding the position. The incident matters because it again exposes how oracle-dependent redemption mechanisms can be distorted within a single transaction when pricing lacks robust safeguards. CoreVault and InsurancePool losses beyond the attacker's BNB profit were not specified in the alert. Next, watch for a post-mortem from the CoreVault team clarifying total pool losses, whether depositors are made whole, and any oracle or redemption-cap changes.
Muhabbit's AI wrote this summary of @CertiKAlert's post in its own words. It can get details wrong, so read the post on X.
Named in this story
CoreVault, InsurancePool, BNB (BNB), CertiK
A linked name opens that asset's sentiment page.