Hacking News
Tendril Exploit Drains $555K in USDT
An attacker exploited a bug in the TENDRIL token's sell logic to withdraw nearly all USDT from its PancakeSwap V2 pool on BNB Chain. The exploit occurred on November 5, 2026, and involved a flaw in the token's sell hook, which allowed the attacker to manipulate the pool's reserves and withdraw about $555,000 in USDT. The attack highlights the need for rigorous auditing and secure coding practices in decentralized finance (DeFi) to prevent vulnerabilities in custom token logic.