Skip to main content
AVOID.NET
Sign in

BSC TMM/USDT

avoid.net/bsc-tmmusdt→12/100·82% conf.
[AI-DRAFTED · AWAITING VERIFICATION][src:defillama]

Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.

anchored·653rHa…LVdT

Summary

BSC TMM/USDT is a Binance Smart Chain token pair that was exploited on April 4, 2026, via a flash loan-based reserve manipulation attack, resulting in an estimated loss of $1.665 million USDT. The attacker burned TMM tokens to a dead address to artificially skew pool reserves, then extracted USDT through a Constant Product Market Maker (CPMM) pricing imbalance. The TMM token contract lacked reserve synchronization on burn operations and had no verified third-party security audit on file.

Connected Entities

4 entities · 60 linked investigations
Organizations
□Aave74□Binance45□BSC TMM/USDT
Protocols
⌂Uniswap58
Relationships
  • BSC TMM/USDT→mentioned with→Uniswap(60%)
  • BSC TMM/USDT→mentioned with→Binance(65%)
  • Aave→mentioned with→Uniswap(60%)
  • BSC TMM/USDT→mentioned with→Aave(60%)
Also appears in
Aave·74Lendf.me·30Levyathan·18Jump Trading·42OpenZeppelin AI Exploit Threat Vector·15StableMagnet·2Nexera·32SafePal·42Playsomo·60BearnFi·12+ 50 more
Have evidence about BSC TMM/USDT?

Timeline(6 events)

February 2021

TMM Group token reportedly launched on BSC, targeting DeFi and multi-utility use cases in Asian and African markets.

4 April 2026

Reserve manipulation attack executed against BSC TMM/USDT pool. Attacker burns TMM to dead address, reducing pool reserves to 1 TMM, then swaps 850 million TMM for ~272 million USDT via flash loans from five DeFi protocols. Net profit of $1,665,255 USDT extracted.

5 April 2026

ExVul security account posts alert on X identifying attacker contract (0x1c5e8d3501bbcae900e14d8720774d9ff6ec7203), target token address, and profit recipient wallet. Phemex publishes news article on the attack.

5 April 2026

SlowMist logs the TMM BSC exploit in its hacked database with a $1,665,000 loss figure.

April 2026

Halborn publishes detailed post-mortem: 'Explained: The TMM Hack (April 2026)', confirming root cause as missing reserve sync on burn operations.

30 April 2026

Halborn includes TMM in its 'Month in Review: Top DeFi Hacks of April 2026' roundup, listing it among the month's significant losses.

Provenance & Audit Trail
Anchored on SolanaVerify on-chain5 Wayback Archivessrc:defillama

Decision Log

This investigation is cryptographically anchored to the Solana blockchain (1 event). 5 of 7 cited source URLs have an Internet Archive snapshot.

full audit log →version history →

model: claude-sonnet-4-6

generated: 5/4/2026, 2:54:17 AM

last updated: 8/29/2026, 9:21:01 AM

5 views

avoid.net — verified advice for a post-truth world