An attacker used a flash loan on BNB Smart Chain to manipulate CoreVault’s price oracle before draining 160.26 BNB, worth about $112,200 according to CertiK, from its InsurancePool. The manipulation reportedly inflated redemptions by as much as 33 times, allowing the attacker to extract excess funds, repay the flash loan and retain the stolen BNB as profit. The incident occurred on November 4, 2026, and was flagged by TenArmorAlert’s on-chain monitoring, but no detailed post-mortem or major recovery announcement has been published. The depleted InsurancePool leaves CoreVault users with less protection, while the handling of their losses remains uncertain.
Source: Read the original article
Disclaimer: this content is for information purposes only and is not financial advice. Cryptocurrencies are highly volatile: you may lose all of your capital. Always do your own research. Legal notice
