DLMC Token (BNB Chain Flash Loan Exploit)
Summary
DLMC (Decentralized Legacy Management Corporation) is a BNB Chain DeFi token that suffered a flash loan price manipulation exploit on June 24, 2026, resulting in a net loss of approximately $222,560 in USDT from its treasury. The project markets itself as a fully decentralized, CertiK-verified ecosystem with renounced ownership, but a design flaw in its internal price calculation allowed an attacker to drain funds in a single transaction. No team has been publicly identified, no post-exploit response has been issued, and the protocol's referral and DAO reward structure resemble patterns common in high-risk DeFi schemes.
Connected Entities
1 entities · 10 linked investigationsTimeline(2 events)
2026-06-24
Flash loan exploit executed at approximately 11:15 UTC in BNB Chain block 106091607. Attacker used a 1.42 million USDT PancakeSwap flash loan to inflate the internal DLMC price and drain approximately $222,560 net from the treasury.
CryptoTimes2026-06-25
TenArmorAlert, DeFi_Nerd_sec, and DefimonAlerts publicly flagged the exploit. Security reports analyzed the root cause as a self-referential pricing trap in the _updatePrice() function.
CryptoTimes / CryipDecision Log
- #3review approve⛓ pending8/8/2026, 3:56:37 AMhash: EcaHdm6E6oGGJZdiirsrrS5XgSvwWfLTx1kK2kZujHxM
- #2review⛓ pending8/8/2026, 3:56:37 AMhash: FiCFaBZWqXRjGG31zwPJYsP6bCczDYgmZ9CKMtBRRgAy
- hash: A8rzoDXMHrX4q474oVyvFEnCwHQtrcpRPgKdHbGsg7zB
This investigation is cryptographically anchored to the Solana blockchain (1 event). 3 of 3 cited source URLs have an Internet Archive snapshot.
model: claude-sonnet-4-6
generated: 6/26/2026, 5:19:31 PM
last updated: 8/8/2026, 3:56:37 AM
avoid.net — verified advice for a post-truth world