Hackers exploit OCA deflationary logic to attack the USDC-OCA pool, profiting approximately $340,000

Odaily Planet Daily reports that according to BlockSec Phalcon monitoring, the USDC-OCA pool on the BSC chain was attacked, resulting in approximately $422,000 worth of USDC being withdrawn. The attacker exploited OCA’s sellOCA() deflationary logic, removing an equivalent amount of OCA from the liquidity pool during the transaction to artificially inflate the price. The attack was completed in three transactions, with the first executing the attack and the subsequent two used to pay bribes. The attacker paid a total of about 112 BNB to 48club-puissant-builder, with final profits of approximately $340,000. Another related transaction within the same block failed, suspected to have been front-run by the attacker.