According to OnchainLens, on November 4, an attacker exploited InsurancePool and CoreVault on BNB Chain through flash loan price manipulation, draining approximately $111,000 from the affected protocols.
The attacker borrowed roughly $143.6 million in Wrapped BNB (WBNB) via Lista DAO's Moolah platform and used large swaps to manipulate liquidity prices. This allowed the attacker to trigger an inflated withdrawal of 260.21 BNB (valued at approximately $180,300) from InsurancePool via CoreVault. After reversing the trades to restore market conditions, the attacker repaid the flash loan and retained approximately 160.26 BNB in net gains before gas fees, while InsurancePool suffered an estimated loss of around 179.5 BNB.