AROS Attack On BNB Chain Adds $295K Loss As June Opens With DeFi Exploits

384 views

A suspicious AROS attack on BNB Chain has been flagged for an estimated $295,300 loss, adding another small-cap token incident to a rough start for DeFi security in June.

The AROS-linked BNB Chain transaction was detected on-chain, with early monitoring placing the loss near $295.3K. The technical root cause has not yet been confirmed through a full postmortem, leaving the incident in the “suspicious attack” category rather than a fully explained exploit tied to a verified contract flaw, compromised key, oracle weakness or liquidity-pool manipulation path.

The alert is separate from the earlier SEA attacks on Arbitrum. That case involved SEA-related activity on Arbitrum and an estimated $153,000 loss. The new incident involves AROS activity on BNB Chain, a different network, a different token and a larger estimated loss.

AROS Adds Another BNB Chain Token-Level Incident

BNB Chain remains one of the busiest EVM environments for speculative tokens, fast liquidity launches and short-cycle trading. That activity can make small-cap pools attractive targets because attackers often need only one weak token mechanism, one permissive contract path or one distorted liquidity setup to extract value quickly.

The AROS case has not yet been tied to a specific confirmed exploit route. Early token-level attacks on BNB Chain can involve transfer-tax behavior, burn logic, permissioned functions, blacklist controls, liquidity reserve manipulation, router assumptions or approval abuse. Until contract-level analysis is published, the cleaner framing is that AROS-related activity on BNB Chain has been flagged for a roughly $295K loss while the exact mechanics remain unconfirmed.

That matters because not every exploit involving a token pair is an exchange failure. In many BNB Chain incidents, the DEX or router is only the place where value is extracted, while the weakness sits inside the token contract or surrounding liquidity design. A previous PancakeSwap BCE-USDT pool incident followed that pattern, with the suspected issue tied to token-side burn mechanics rather than PancakeSwap itself.

Fluid Rewards Drain Makes June’s Start Look Worse

The AROS alert also comes just as Fluid is dealing with a separate rewards-system exploit. Fluid said its off-chain Merkle rewards distribution infrastructure was affected, while user funds, core protocol contracts, lending markets, vaults and DEX infrastructure were not at risk.

The Fluid incident was not a broad protocol drain. The loss came from a rewards path where compromised operational control allowed fraudulent claims from Merkle distributors. Public tracking placed the stolen assets at about 125,000 FLUID and 51,900 GHO, with the proceeds swapped and routed through Tornado Cash.

That makes Fluid a different type of security failure from AROS, but it belongs in the same early-June risk cycle. AROS appears to be a token-level BNB Chain attack with the mechanics still pending. Fluid was a rewards-infrastructure compromise where the core markets stayed safe. Both cases show how losses can form outside the most obvious “main protocol hacked” narrative.

Small Exploits Still Damage User Confidence

The dollar amounts are smaller than the largest bridge and lending-market hacks, but the pattern is uncomfortable. DeFi users are being hit across different layers: reward distributors, token contracts, liquidity pools, bridge permissions and narrow operational systems.

A larger Gravity Bridge drain recently showed how suspected signing or control-path weaknesses can turn into multi-million-dollar losses. Alephium’s TokenBridge also faced an $815,000 Ethereum-side exploit after forged message activity reportedly affected wrapped asset movement.

AROS now adds another BNB Chain case to that list. The loss estimate may change as investigators trace swaps, wallet links and remaining balances, and the exploit label may become clearer after contract review. For now, the useful facts are narrower: AROS activity on BNB Chain has been flagged for about $295.3K in losses, the incident is separate from the earlier SEA attacks on Arbitrum, and Fluid’s fresh rewards exploit has made June’s opening security run look worse.

Bitcoin coin symbol
Btc
Bitcoin
$73.556
price
red chart
decrease symbol0.32505%
price change
TRADE NOW

The next meaningful update is the exploit path. If the AROS loss came from token mechanics, liquidity manipulation or privileged contract behavior, the risk may stay limited to that asset. If linked wallets or repeatable contract logic appear across related deployments, the incident becomes more than another isolated small-cap drain. Either way, June has started with attackers finding value in the edges of DeFi, not only in the headline protocols users usually watch.

Previous

Coinbase Launches Direct INR Deposits And Withdrawals In India

Next

Menace Review 2026: Crypto Casino Speed, VIP Value, Bonuses, and Player Risk

Written by

1731 posts

Born and raised in Romania, currently living in Spain. Iulian discovered a knack for writing from a tender age, won some minor awards for fiction that didn't pay much.

VIEW AUTHOR

Publish your own article

Guest post article. Guaranteed publishing with just a few clicks

START PUBLISHING ADVERTISE WITH US

Browse categories

Explore trending topics in the crypto community right now.

Bitcoin

Strategy Buys 1036 BTC, Repurchases $188M in STRC

Strategy purchased another 1,036 Bitcoin for approximately $81.9 million between November 2 and November 8, increasing its corporate holdings to 850,364 BTC as the cryptocurrency traded below the company's average acquisition cost. The purchases were completed at an average price of $79,012 per Bitcoin, including fees and expenses, the company confirmed in its November 9 SEC filing. Strategy's total Bitcoin investment now stands at approximately $64.16 billion, with an average acquisition price of $75,456 per coin. Bitcoin traded near $74,570...

Bitcoin Drops Below $76K as Crypto Liquidations Top $1B

Bitcoin plunged below $76,000 on November 5, losing more than 5% as a sharp sell-off in U.S. technology stocks spread across cryptocurrency markets and triggered over $1 billion in leveraged position liquidations. Ethereum dropped approximately 7.5% to $2,250, while Solana fell nearly 8% to $89. XRP declined more than 6%, BNB lost roughly 4%, and several smaller cryptocurrencies suffered steeper losses as investors reduced exposure to riskier assets. Bitcoin briefly approached $75,000 after trading above $80,000 a day earlier, reversing...

JPMorgan Forecasts 10% Annual Bitcoin Returns, Outpacing Stocks and Gold

JPMorgan Asset Management has introduced a 10% annualized return forecast for Bitcoin in its 2027 Long-Term Capital Market Assumptions, placing the cryptocurrency ahead of U.S. large-cap equities, gold and several traditional asset classes over the next 10 to 15 years. Released on October 19, the 31st edition marks JPMorgan's first formal inclusion of Bitcoin in its long-term return projections, extending the bank's institutional investment framework into cryptocurrency. The 10% base-case assumption exceeds the bank's 7.5% annual forecast for U.S. large-cap...

Bitcoin and Ethereum Plunge as Hot U.S. CPI Sparks Nearly $1 Billion in Crypto Liquidations

Bitcoin and Ethereum extended their losses on October 15 after hotter-than-expected U.S. inflation data rattled financial markets, triggering nearly $1 billion in cryptocurrency liquidations as leveraged traders faced another wave of forced selling. Bitcoin fell toward $80,000, trading around $81,000 after retreating from levels above $83,000 before the inflation release. Ethereum suffered heavier losses, dropping more than 6% over 24 hours to approximately $2,365. The sell-off followed the October 14 release of September's Consumer Price Index (CPI), which showed annual...

MORE ARTICLES

Ethereum

Abstract Ethereum Layer 2 to Shut Down on December 15 With $47.9M Still Secured

Abstract, the consumer-focused Ethereum Layer 2 backed by Pudgy Penguins parent Igloo Inc., will shut down on December 15, 2026, ending a nearly three-year effort to build a blockchain around consumer crypto. Users must move their assets before the deadline through Abstract’s official Migration Hub or native bridge. Assets remaining on the network after December 15 will become inaccessible. The native bridge currently carries an expected withdrawal delay of roughly three hours. The October 6 wind-down notice also warned users...

Ledger Patches Ethereum Signing Flaw Before Researchers Disclose It

Ledger has patched a vulnerability in its Ethereum hardware-wallet app that could allow a malicious dApp to replace a transaction during the approval process while the device continued showing users the transaction they originally reviewed. Security firm TestMachine disclosed the signature-substitution flaw on August 21 after reproducing it on Ledger hardware. Ledger had already shipped Ethereum app version 1.22.2 on August 12, with its release history listing security fixes for the update. Malicious dApp Could Change the Transaction Before Signing...

Jesse Pollak Pushes Back On Coinbase ETH Selling Criticism, Points To 150K ETH Treasury

Base creator Jesse Pollak has pushed back against criticism that Coinbase is selling ETH while benefiting from Ethereum, pointing to the exchange’s roughly 150,000 ETH corporate position and years of investment across the network. Pollak argued that Coinbase has held about 150,000 ETH through multiple market cycles, while describing the company as the largest ETH holder outside dedicated digital asset treasury companies by a wide margin. Coinbase’s latest regulatory filing backs up the scale of that position. The company held...

Tornado Cash Phishing Frontend Drains 1,010 ETH From User

A crypto user lost 1,010 ETH after following an old Tornado Cash bookmark into a phishing frontend that captured the private withdrawal credentials needed to access the deposited funds. The victim deposited the ETH into legitimate Tornado Cash contracts, but the malicious interface obtained the private note generated during the process. The attacker then used those credentials to withdraw the assets within roughly 12 hours without compromising the underlying Tornado Cash smart contracts. Phishing Frontend Targeted Private Withdrawal Notes Tornado...

MORE ARTICLES

Trading

5 Best Crypto APIs for Trading Bots in 2026

A crypto trading bot is a chain of dependencies. It reads a position, prices it, decides, places an order, and confirms settlement. Every one of those steps is an API call, and a failure at any single step stops the strategy. The provider choice shapes what a bot can actually do more than the strategy logic does. The common mistake is searching for one API that covers everything. No such API exists in 2026. Market data providers do not route...

Best Prediction Markets Alternatives: Outpoll, Limitless, Myriad, Manifold

Polymarket and Kalshi helped turn prediction markets into a mainstream trading category, but neither platform fits every trader. Access varies by country, market selection can lean heavily toward certain topics, and the tools available for entering, managing, and automating positions differ sharply across platforms. The strongest alternatives are not identical copies. Some emerging prediction markets platforms focus on professional order controls, some concentrate on fast crypto and financial markets, and others use onchain infrastructure or play-money forecasting. Users unfamiliar with...

How to Get a Funded Crypto Trading Account in 2026 Step by Step

A funded crypto trading account gives a trader access to more notional capital after they prove they can follow a firm’s risk rules. The usual route starts with a paid crypto prop firm challenge that requires a profit target without breaching daily or overall loss limits. Passing is not only about making money. Drawdown control, minimum trading days and rule compliance determine whether the account survives. The evaluation fee can be lost, and crypto prop firms use different account models,...

How To Trade Tokenized Stock Perps: Leverage, Funding And Risks

Tokenized stock perps allow traders to take long or short exposure to companies, ETFs and equity indexes through crypto-native derivatives markets. Positions can use stablecoin collateral, remain open without an expiry date and continue trading when the main stock exchange is closed. The trader receives price exposure, not ownership of the referenced shares. The interface often looks identical to a crypto perpetual futures market. The risk does not. A stock-linked contract can remain active overnight, through weekends and during holidays...

MORE ARTICLES

Tech

Gnosis Pay Breach Exposes Card Data, Wallet Addresses

Gnosis Pay has confirmed a security breach exposing sensitive customer information, including payment card numbers, security codes, residential addresses and cryptocurrency wallet details, raising concerns about identity theft and targeted attacks against crypto holders. The company detected unauthorized access to its legacy consumer card infrastructure on November 3 and disclosed the incident on November 6. Its security team began containment within two hours, subsequently replacing compromised credentials and addressing the vulnerability. Gnosis Pay said customer funds remained unaffected and its...

Binance, Deribit Revoke SignalPlus API Keys Following Security Warning

Binance has revoked all API keys connected to third-party trading platform SignalPlus following a potential security issue, cutting off automated access to customer accounts as cryptocurrency exchanges move to prevent unauthorized trading. The November 5 precautionary measure follows a security warning involving SignalPlus, which provides trading tools for cryptocurrency options and derivatives markets. Deribit also removed API credentials associated with the platform after reviewing its exposure. Binance confirmed that its systems were unaffected and customer funds remained safe. Deribit similarly...

Trade.xyz Restores GitBook Docs After Security Incident

Trade.xyz, the Hyperliquid-based trading platform offering perpetual futures tied to stocks, indexes and commodities, has restored its technical documentation following unauthorized activity on its GitBook pages, while maintaining a warning against clicking links as investigators assess the breach. The November 2 incident affected the platform's documentation infrastructure, with the team restoring its previous version by 9:15 a.m. Eastern Time (14:15 UTC). Trade.xyz has not reported any confirmed losses, trading interruptions or disruption to on-chain settlements, although it has yet to...

Mercado Bitcoin Says $38M Hit, $11.2M in Assets Frozen

Mercado Bitcoin, one of Brazil's largest cryptocurrency exchanges, has suspended operations following a security breach involving approximately $38 million in digital assets, with $11.2 million already frozen as investigators trace suspicious transfers across multiple blockchains. The incident occurred on November 2, when attackers allegedly gained control of wallets associated with the exchange and transferred substantial cryptocurrency holdings to newly created addresses. Mercado Bitcoin initially suspended deposits and withdrawals before temporarily taking its platform offline. The company maintained that customer assets...

MORE ARTICLES