79thVault Lost $12.5 Million on BNB Chain. The Contract Had One Role for That.
A role in the 79AU contract could move the pool's tokens and update its reserves. In seven transactions, 2.01 million 79AU moved.
79thVault lost about $12.5 million on BNB Chain[1]. The wallet moved 2.01 million 79AU tokens out of its PancakeSwap pool[1]. They were sold for BNB at another address[1]. The seven transfers ran from 07:25 to 08:25 UTC on October 7[2]. The pool’s USDT reserves fell from about $15.2 million to $3.9 million[3]. The sales made 16,249 BNB, worth about $12.5 million, sent to a new address[4].
The 79AU contract had one OPERATOR_ROLE-only function[5]. That function could move tokens from the pool and update its reserves[5]. Defimon Alerts called the cause a suspected private-key compromise or possible insider activity[1].
What to do: no approval to revoke is named. The operator-only permission that could move the pool’s tokens was later revoked[5].
Who gains, who loses
Receipts
79thVault lost about $12.5 million on BNB Chain after 2.01 million 79AU tokens were drained from a PancakeSwap liquidity pool and sold for BNB.
“79thVault lost about $12.5 million in a suspected private-key compromise on BNB Chain after an operator wallet moved 79AU tokens from its PancakeSwap liquidity pool to another address, where they were sold for BNB; Defimon Alerts…”
The 79thVault wallet transferred 2.01 million 79AU tokens in seven transactions between 07:25 and 08:25 UTC on October 7.
“The wallet transferred 2.01 million 79AU tokens in seven transactions between about 3:25 and 4:25 a.m. ET (07:25–08:25 UTC) on Oct. 7.”
The 79thVault pool’s USDT reserves fell from about $15.2 million to $3.9 million.
“The pool’s USDT reserves fell from about $15.2 million to $3.9 million.”
The 79thVault transactions produced 16,249 BNB worth about $12.5 million, which was sent to a separate address.
“The transactions produced 16,249 BNB, worth about $12.5 million, which was sent to a separate address.”
The 79AU contract contained an OPERATOR_ROLE-only function that could move tokens from the pool and update its reserves, and that permission was later revoked.
“The 79AU contract included an OPERATOR_ROLE-only function that could move tokens from the pool and update its reserves.”
Cabal Desk is reporting, written with AI under human oversight. Every bracketed number opens its receipt: the source, the quoted span, the hash. Headlines and characterisations are commentary; the sourced facts are the receipts. Not investment advice. Corrections log. Editorial & legal.