USDC-OCA Liquidity Pool on BSC Chain Attacked, 422,000 USDC Withdrawn

USDC-OCA Liquidity Pool on BSC Chain Attacked, 422,000 USDC Withdrawn

First seen 15 Feb 2026, 01:09 UTC BinancePanewslab 24.3

Article Content

Browse articles
ThreatCluster

On February 14, 2026, an unknown attacker exploited a vulnerability in the OCA token's `sellOCA()` function within a USDC-OCA liquidity pool on the BSC chain. The attack led to the withdrawal of approximately 422,000 USDC by manipulating the token's deflationary mechanics, which inflated the token price within the pool. BlockSec Phalcon monitoring reported the incident.

Timeline

2026-02-14
Attack on USDC-OCA liquidity pool reported
2026-02-14
422,000 USDC withdrawn due to exploit