On February 2, 2023, Orion Protocol on BSC and Ethereum was exploited via reentrancy in swapThroughOrionPool. Attacker created a fake token (ATK) and used reentrancy to hijack deposit logic, extracting $3M.