On January 10, 2023, the BRA token on BSC was exploited through a tax-sharing loophole in the transfer mechanism. The attacker exploited a logic flaw where if sender and recipient formed a pair, the transfer function would double rewards. This created 1.6 million additional BRA tokens that were sold for approximately 819 WBNB (~$225K).

The price of BRA token on BNB Chain is zero. According to the analysis, the token will be taxed during the transaction, and the tax collected will be directly sent to the transaction pair, and the tax will be added twice. Under this mechanism, after many such transactions, the number of tokens in the transaction pair continues to increase. At the same time, any user can call the skim function to retrieve the extra tokens in the transaction pair, which results in the actual number of tokens exceeding its issuance limit. This BRA token attack has caused 820 WBNB losses. The address of the attacker (0xE2Ba15be8C6Fb0d7C1F7bEA9106eb8232248FB8B).