FoxMarket on BSC Exploited for About $118.7K After Stake Function Used Manipulable Pricing

FoxMarket on BNB Chain was reportedly exploited for roughly $118.7K after an attacker took advantage of a stake function tied to a manipulable price quote, according to a security firm’s detailed alert on the incident.https://twitter.com/SolidityScan/status/2089316537316315286

The firm said the protocol’s stake logic fixed the staked amount from a Pancake spot quote that could be influenced before a large swap skewed pool reserves, allowing the Treasury to trust a stale value and mint excess FOX while also paying referral rewards.

The security firm’s post added that the attacker used a flash-loan-assisted flow, and that the exploit involved a victim pair and a set of vulnerable contracts identified in the alert. The technical explanation suggests the loss came from reward accounting that accepted an input price that could be changed within the same sequence of transactions, rather than from a direct token transfer from a single wallet.

How the stake path appears to have been abused

According to the alert, the attacker first manipulated the on-chain spot quote used by FoxMarket before triggering the staking process. That left the protocol working with a price reference that no longer matched the market state, which in turn let the Treasury mint more FOX than it should have based on the underlying stake value.

The same setup also appears to have triggered referral payments, adding to the total loss described in the post. The firm said it identified the attacker address and the affected pair, but the broader public record for the event remains limited to that security notice.

On that basis, the incident reads as a pricing and accounting failure inside the stake workflow, not as a broader compromise of the chain itself. The reported dollar figure is the estimated impact cited in the alert, and no separate public confirmation of the loss was provided in the material available.