Position Manager exploit (2026-09-30) — attacker addresses
- Scam type: Hack
- Chain: EVM (Ethereum, BNB Chain, Base and other EVM chains)
- Reported: 2026-10-15
- Last updated: 2026-10-16
Position Manager exploit on EVM, 2026-09-30. DeFiHackLabs summary: PositionManager - deposit values the vault's existing USDT at the manipulable PancakeSwap V3 spot price, so crashing the spot before depositing mints inflated shares that withdraw redeems in the same transaction. Loss as recorded by DeFiHackLabs: 32,080.604282 USDT (exactly reproduced) on BNB Chain; one atomic tx crashed the USDT/BTCB spot with an 8,000,000 USDT swap, then ran 24 deposit(1,000,000 USDT)/withdraw cycles to drain the vault's own. Addresses below are copied verbatim from the DeFiHackLabs proof-of-concept header…
Other addresses in this report: 0xfc3facd67138966ab0c841e905b0c4bca1abe92f