Morning Edition · Thursday, July 30, 2026Published at 1:29 AM EDT · New York

DeFi Self-Dealing Exploits Drain Reward Vaults on Ethereum and BNB Chain

Proof-of-concept reconstructions this week detail a roughly 301.7 ETH reward-vault drain and a 605,000 USDT reward-on-transfer attack, both caused by flawed incentive logic rather than stolen keys.

The security-research repository DeFiHackLabs published new proof-of-concept reconstructions of two reward-mechanism exploits. In the first, an attacker drained roughly 301.7 ETH from a project's reward vault on Ethereum through self-dealin…