SKP token hack — May 2026
Incident facts
| Date of incident | |
|---|---|
| Publicly disclosed | May 27, 2026 |
| Target type | Token contract |
| Loss | $212,615Price at time of incident |
| Method | Other or undisclosedUndisclosed: the attack moved USDT, BTCB and SKP through SKP pools, PancakeSwap, Venus and Lista DAO and drained the SKP/USDT pool; the flaw has not been established |
| Chains | BNB Chain |
| Outcome | Unresolved |
What happened
SKP, a token on BNB Chain, lost about $212,000 on 26 May 2026, in a transaction at 17:47:44 UTC that moved funds through SKP pools, PancakeSwap, Venus and Lista DAO. TenArmor flagged it, and The Crypto Times reported it the next day, noting that the flaw behind it was not known.
DeFiHackLabs reconstructs the attack around an owner-only function in the SKP token that burns SKP held inside the SKP/USDT pair, which would let the pair's price be inflated before SKP is used as collateral elsewhere. This registry checked the token's current owner address, and it is not the address that sent the attack transaction, so the account of who triggered what remains unsettled and the vector is recorded as undisclosed.
This registry read the receipt: the SKP/USDT pool lost 234,134.95 USDT, and the attacker's address received 162,854.21 USDT and 75.88 BNB, about $212,600 in all at that hour's BNB price, matching TenArmor's figure. That amount is recorded. No statement from the project has been found.
Sources
- The Crypto TimesSecondary · retrieved 2026-10-06
- DeFiHackLabs exploit reconstructionSecondary · retrieved 2026-10-06
- BNB Chain transaction receipt, read by this registryOn-chain · retrieved 2026-10-06
Changes to this entry
- Recorded on 6 October 2026 in a backfill of 2026 incidents that this registry had missed, found through DeFiHackLabs' reproduction list. The amount was checked against the transaction receipt, read by this registry from a public node.
Cite this
This data is published under CC BY 4.0. You may reuse it, including commercially, as long as you credit iTokenly and link back.
iTokenly Hack Registry, "SKP token hack — May 2026", iTokenly, accessed 2026-10-06, https://itokenly.com/hacks/skp-token-bsc-may-2026https://itokenly.com/hacks/skp-token-bsc-may-2026Permalinks never change. If an entry is renamed, the old address keeps working.
Spotted an error? Write to [email protected]. Corrections to published figures are logged on this page. See the methodology for how entries are checked.