TENDRIL (BNB Chain) sell-hook burn-then-sync drained TENDRIL/USDT pool of ~$555K USDT (4 Nov 2026)
- Scam type: Hack
- Chain: EVM (Ethereum, BNB Chain, Base and other EVM chains)
- Project or site name: TENDRIL
- Incident date: 2026-11-04
- Reported: 2026-11-05
- Last updated: 2026-11-05
CertiK Alert, BlockSec Phalcon and ExVul reported that the TENDRIL/USDT Pancake V2 pool on BNB Chain lost about $555K–$556K USDT after a sell-hook let a seller burn the pair's TENDRIL balance and call sync() before the remaining sell tokens arrived, so the delayed swap drained nearly all USDT. The exploit transaction they cite is 0xfdff4fba4327821c204af07944076ecaaee163a994398fdf4063d08712e40059 on BNB Chain (4 Nov 2026 16:02:45 UTC per BscScan's listing in CertiK's link preview). A public BNB Chain RPC read of that transaction shows it was sent by 0xb81e4aafa347b27112b7f6f5de6cf7cd516021ff…
Other addresses in this report: 0xb81e4aafa347b27112b7f6f5de6cf7cd516021ff, 0xc8cb6a2aa825a576e1470479046056fe414ee0f8