Goose Finance on BSC exploited for $8K via share accounting flaw in vault withdrawal logic on March 14, 2026. The bug evaded prior audits.

Goose Finance, a yield farming protocol on BNB Chain, was exploited due to a share accounting flaw in the StrategyGooseEgg contract. The attacker repeatedly looped deposit() and withdraw() to mint inflated shares before rewards were settled, then redeemed them at higher value after harvest, profiting ~$8,435.