Hacker Exploits OCA Deflation Logic to Attack USDC-OCA Pool, Profiting Approximately $340,000

Odaily News According to BlockSec Phalcon monitoring, the USDC-OCA pool on the BSC chain was attacked, resulting in the extraction of approximately $422,000 worth of USDC. The attacker exploited the sellOCA() deflation logic of OCA, simultaneously removing an equivalent amount of OCA from the liquidity pool during the transaction to artificially inflate the price. The attack was carried out through three transactions, with the first one executing the attack and the latter two used to pay bribes. The attacker paid a total of about 112 BNB to 48club-puissant-builder, with a final profit of approximately $340,000. Another related transaction within the same block failed, suspected to have been front-run by this attacker.