BNB Chain's Insurance Pool Suspected of Flash Loan Attack, Losses Approximately $111,000

November 4th, according to Onchain Lens monitoring, InsurancePool/CoreVault on BNB Chain is suspected to have suffered a price manipulation attack. The attacker manipulated the liquidity pool price through a flash loan, triggering abnormally high redemptions and profiting approximately 160.26 BNB (about $111,000, excluding gas fees). The attack process is as follows:

The attacker borrowed approximately $143.6 million in WBNB through Moolah under Lista DAO. Manipulated the liquidity pool price through large exchange transactions. Triggered InsurancePool withdrawal via CoreVault, withdrawing 260.21 BNB, worth about $180,300. Subsequently executed reverse exchange transactions and repaid the flash loan. Ultimately obtained approximately 160.26 BNB, worth about $111,000.