TENDRIL (BNB Chain) sell-hook burn-then-sync drained TENDRIL/USDT pool of ~$555K USDT (4 Nov 2026)

• Scam type: Hack
• Chain: EVM (Ethereum, BNB Chain, Base and other EVM chains)
• Project or site name: TENDRIL
• Incident date: 2026-11-04
• Reported: 2026-11-05
• Last updated: 2026-11-05

CertiK Alert, BlockSec Phalcon and ExVul reported that the TENDRIL/USDT Pancake V2 pool on BNB Chain lost about $555K–$556K USDT after a sell-hook let a seller burn the pair's TENDRIL balance and call sync() before the remaining sell tokens arrived, so the delayed swap drained nearly all USDT. The exploit transaction they cite is 0xfdff4fba4327821c204af07944076ecaaee163a994398fdf4063d08712e40059 on BNB Chain (4 Nov 2026 16:02:45 UTC per BscScan's listing in CertiK's link preview). A public BNB Chain RPC read of that transaction shows it was sent by 0xb81e4aafa347b27112b7f6f5de6cf7cd516021ff…