Verify a decision

{"actor":"system:backfill","investigation_id":"0ce55349-2674-40af-a2db-d43953880d85","kind":"publish","page_slug":"lmlusdt-staking-protocol","published_at":"2026-05-29T15:54:26.262Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"LML/USDT staking protocol","sections":[{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.cryptotimes.io/2026/04/01/lml-staking-protocol-exploited-for-950k-on-bsc-token-crashes-99-6/","type":"other","url":""},{"credibility":3,"name":"https://en.cryptonomist.ch/2026/04/01/lml-protocol-bsc-staking/","type":"other","url":""},{"credibility":3,"name":"https://coinfomania.com/bsc-lml-protocol-hit-by-950k-price-manipulation-attack/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.cryptotimes.io/2026/04/01/lml-staking-protocol-exploited-for-950k-on-bsc-token-crashes-99-6/","type":"other","url":""},{"credibility":3,"name":"https://www.bitget.com/news/detail/12560605325066","type":"other","url":""},{"credibility":3,"name":"https://www.panewslab.com/en/articles/019d478c-6698-7558-9ba6-fcded9dc4486","type":"other","url":""},{"credibility":3,"name":"https://www.binance.com/en/square/post/307740210174225","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://en.cryptonomist.ch/2026/04/01/lml-protocol-bsc-staking/","type":"other","url":""},{"credibility":3,"name":"https://www.mexc.com/news/997020","type":"other","url":""},{"credibility":3,"name":"https://cryptonews.net/news/security/32637254/","type":"other","url":""},{"credibility":3,"name":"https://www.cryptotimes.io/2026/04/01/lml-staking-protocol-exploited-for-950k-on-bsc-token-crashes-99-6/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.cryptotimes.io/2026/04/01/lml-staking-protocol-exploited-for-950k-on-bsc-token-crashes-99-6/","type":"other","url":""},{"credibility":3,"name":"https://phemex.com/news/article/bscs-lmlusdt-staking-protocol-hit-by-price-manipulation-attack-70158","type":"other","url":""},{"credibility":3,"name":"https://www.kucoin.com/news/flash/bsc-chain-lml-usdt-staking-protocol-suffers-price-manipulation-attack-losses-reach-950-000","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.cryptotimes.io/2026/04/01/lml-staking-protocol-exploited-for-950k-on-bsc-token-crashes-99-6/","type":"other","url":""},{"credibility":3,"name":"https://coinfomania.com/bsc-lml-protocol-hit-by-950k-price-manipulation-attack/","type":"other","url":""},{"credibility":3,"name":"https://www.mexc.com/news/996835","type":"other","url":""},{"credibility":3,"name":"https://cryptonews.net/news/security/32636825/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://en.cryptonomist.ch/2026/04/01/lml-protocol-bsc-staking/","type":"other","url":""},{"credibility":3,"name":"https://www.panewslab.com/en/articles/019d478c-6698-7558-9ba6-fcded9dc4486","type":"other","url":""},{"credibility":3,"name":"https://coinfomania.com/bsc-lml-protocol-hit-by-950k-price-manipulation-attack/","type":"other","url":""},{"credibility":3,"name":"https://cryptonews.net/news/security/32637254/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.bitget.com/news/detail/12560605325066","type":"other","url":""},{"credibility":3,"name":"https://www.panewslab.com/en/articles/019d478c-6698-7558-9ba6-fcded9dc4486","type":"other","url":""},{"credibility":3,"name":"https://www.binance.com/en/square/post/307740210174225","type":"other","url":""},{"credibility":3,"name":"https://www.mexc.com/news/997020","type":"other","url":""}]}],"sources_used":[],"summary":"The LML/USDT staking protocol was a yield-bearing staking contract deployed on Binance Smart Chain (BSC) that suffered a catastrophic price manipulation exploit on April 1, 2026, resulting in approximately $950,000 in losses. An attacker aggregated flash loans totaling 309,529,000 USDT, artificially inflated the LML token price by purchasing nearly the entire circulating supply and burning it, then claimed outsized staking rewards against the manipulated price. Stolen funds — converted to 450.6 ETH — were subsequently laundered through Tornado Cash, and no public team response or recovery effort has been documented.","timeline":[{"date":"2026-04-01","event":"BlockSec Phalcon monitoring system detects suspicious activity targeting the LML/USDT staking protocol on BSC.","source":""},{"date":"2026-04-01","event":"Attacker executes price manipulation attack in a single transaction using 309,529,000 USDT in aggregated flash loans; LML token supply largely burned to address(0); reward payout function called 11 times at manipulated price.","source":""},{"date":"2026-04-01","event":"LML token crashes 99.66% on PancakeSwap, from approximately $50 to $0.1758 USDT.","source":""},{"date":"2026-04-01","event":"Attacker converts approximately $950,370 in stolen USDT to 450.6 ETH and begins routing funds through Tornado Cash in batches of 0.1 to 100 ETH.","source":""},{"date":"2026-04-01","event":"Security firms BlockSec and PeckShield publish public disclosures of the exploit; estimated loss confirmed at approximately $950,000.","source":""}]},"v":1}