A flashloan attacker exploited a bug in Bogged's deflationary token _txBurn() method, which charged only 1% instead of the intended 5% fee per transfer. This allowed the attacker to manipulate self-transfers to inflate staking reward calculations and mint 15M BOG tokens. The token crashed 98% from $8.50 to $0.15.

The DeFi protocol Bogged Finance officially stated that hackers carried out a lightning loan attack on the staking function vulnerability of BOG token contracts and withdrew 3 million US dollars from the liquidity pool. The hackers used the Pancake Pair Swap code to withdraw the pledge before the contract verification was completed. income. The official team stated that the remaining 8 million US dollars in the current liquidity pool is safe. The vulnerabilities used by hackers have been "blocked" and cannot be reused. The tools provided by Bogged Finance are still safe to use, and the team is repairing the front end. Display the problem.