Incident case file

LML/USDT Staking Protocol — Spot Price Manipulation (No TWAP)

Incident date March 31, 2026

0 views

Funds movingBSCOracle manipulationCluster: LML-BSC-2026-03

Estimated loss

$950K

Victims identified

Victim group joining is coming soon.

Investigation

70%

Facts and investigation

Attacker: TODO

Funds moved to: Ongoing movement from prefunded wallets

TODO

Timeline: Attacker executed large swaps in the LML/USDT pool on BSC to artificially inflate the LML token price. The staking protocol calculated rewards using a manipulable spot price instead of a TWAP (Time-Weighted Average Price). The attacker then claimed staking rewards from prefunded wallets at the inflated rate, extracting approximately $950,000. Funds are still being tracked and movements are ongoing.

Sources and coverage

Articlehacked.slowmist.iohttps://hacked.slowmist.io/?c=BSC
Articlemexc.comhttps://www.mexc.com/news/840583
Articlebinance.comhttps://www.binance.com/en/square/post/313390725139218

Victim testimonies

No testimonies yet.

+ Add my testimony → (coming soon)