A custom sAVAX Aave Rebalancer contract on Avalanche was exploited via a smart contract vulnerability, allowing an attacker to drain user funds. A whitehat bot frontran the exploit and recovered all funds, resulting in zero net loss to the user.
The SAS Token on BNB Chain was exploited due to a flawed custom transfer logic, allowing an attacker to extract profit by manipulating a sellBurn counter and burning tokens directly from the liquidity pool. The loss amounted to approximately $12,000.