On August 25, 2021, Dot.Finance on BSC was exploited via a flash loan attack that manipulated the VaultPinkBNB contract's token pricing. The attacker injected Cake tokens to inflate the performanceFee parameter, enabling the mintFor function to create excessive pink tokens worth approximately $429.7K.

Polkadot Eco DeFi revenue aggregator Dot.Finance suffered a lightning loan attack. Dot.Finance's token PINK plummeted 35% in a short time, from 0.77 USD to approximately 0.5 USD. The attacker made a profit of 900.89 BNB (approximately $429,724 in total).