The Cryptocurrency Post The CryptocurrencyPost
AboutContact
DeFi

TENDRIL DeFi exploit on BNB Chain drains about $555,000 in USDT

Masked figure in a red-alert DeFi pool on BNB Chain pulls a sell-hook as USDT reserves dip, with PancakeSwap ambiance.

A security advisory from 0xCERT says a flaw in TENDRIL’s sell logic was abused on BNB Chain, leading to a net loss of roughly $555,000 in USDT from the TENDRIL/USDT pool.

The alert describes the issue as a sell-hook vulnerability. In the sequence outlined by the firm, the sell path let the attacker debit the pair token balance and sync reserves before the input transfer had completed, which distorted the pool’s pricing logic during the transaction. The incident was tied to on-chain activity on PancakeSwap V2.

CertiK Alert also flagged the incident in a public post, saying the sell-hook flaw allowed sellers to manipulate the pool’s reserves before the full transfer settled. That post included a direct transaction reference and linked to security monitoring data for the affected pair.

The exploit appears to have targeted the TENDRIL token’s custom contract logic rather than PancakeSwap’s core contracts. The loss was concentrated in the pool backing the token, leaving the incident as a narrow but costly example of how custom sell mechanics can create risk inside automated market maker pools.

Based on the advisory and the public alerts, the visible facts are limited to the exploit path, the affected pool and the estimated loss. The available material does not show broader spillover beyond the TENDRIL/USDT market pair.