DeFi

FAVOR

PulseX

Pulse

BetterBank, a Web3 protocol, was exploited for up to $5M based on recent estimations. The protocol lost from unauthorized bonus minting, based on user-generated liquidity pairs.&nbsp;
BetterBank, a Web3 protocol promising DeFi banking, was exploited for an estimated $1M to $5M. The losses came from unauthorized reward minting, based on rogue liquidity pairs.&nbsp;
BetterBank first noticed unauthorized minting and withdrawals in the past day, sparking speculations as to the source of losses.&nbsp;
<h3 id="span-style-font-weight-400-betterbank-to-relaunch-reward-smart-contract-span">BetterBank to relaunch reward smart contract</h3>
The protocol team was active in handling the attack and ended up compensating losses through its reserves. BetterBank also plans to relaunch its reward program for LPs with a new token airdrop and a new smart contract.
<blockquote class="twitter-tweet">
 🚨UPDATE BETTERBANKERS🚨
 Yesterday was rough. Within minutes it went from “hmm, not normal liquidations” → to “this is so not good.” But we jumped into action: paused the protocol, kept comms open for hours, pulled in devs, and started saving what we could.
 Because of Favor…
 — BetterBank.io (@BetterBank_io) <a href="https://twitter.com/BetterBank_io/status/1960621986465399248?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow" target="_blank">August 27, 2025</a>
</blockquote>
BetterBank originally awarded bonuses for providing liquidity for the FAVOR token. However, investigation showed the liquidity pairs were untracked, and users could create a FAVOR pair against any token, even worthless newly created assets.&nbsp;
Despite the rogue pairs, the exploiter still received ESTEEM tokens, managing to mint a significant amount. BetterBank claimed the contract used to issue rewards was audited, but there was no vetting of the quality of FAVOR liquidity providers. On-chain investigation also <a href="https://x.com/shoucccc/status/1960534610485633369" rel="noopener noreferrer nofollow">showed</a> the rogue minting managed to avoid the tax on bulk-minting rewards, by using external liquidity pairs.&nbsp;
BetterBank was built on PulseChain, using niche stablecoins for its liquidity. The attacker holds a remaining amount of 700K pDAI, still requiring bridging to make the tokens usable. The project team reached out to the hacker by messaging the <a href="https://otter.pulsechain.com/tx/0x9c7237a00fa276c5f10ca1c61d6821869a7fdcd1ade8059729cdc35c9ff7689a" rel="noopener noreferrer nofollow" target="_blank">exploit address</a>, but did not receive an answer or a white hat proposal.&nbsp;
<h3 id="span-style-font-weight-400-betterbank-was-exploited-at-its-peak-span">BetterBank was exploited at its peak</h3>
BetterBank was among the top 5 DeFi protocols on PulseChain. Recently, the project announced $30M in total value locked. Despite the hype, PulseChain invited <a href="https://x.com/AnonDegen123/status/1958455994326851743" rel="noopener noreferrer nofollow">skeptics</a>, mostly due to the chain’s volatile asset.&nbsp;
Following the exploit, BetterBank is down to <a href="https://defillama.com/protocol/betterbank" rel="noopener noreferrer nofollow" target="_blank">$7.96M</a> in total liquidity, with weeks to repair smart contracts and reputational damage. The protocol also carries $10.31M in borrowed liquidity.&nbsp;
Pulse Chain also recently saw growth in its DeFi sector, recovering its liquidity above $300M. Pulse Chain was also affected, as Pulse and PulseX tokens were also part of the exploit. As a result of the hack, the PulseX token fell by over 15%.
<figure style="width: 100%" class="wp-caption alignnone">
 <img src="https://www.cryptopolitan.com/wp-content/uploads/2025/08/PulseXAugust272025.png" alt="BetterBank exploited for up to $5M in rogue bonus attack." width="1303" height="634">
 <figcaption>
 PulseX fell by over 15% following the BetterBank exploit. | Source: <a href="https://www.coingecko.com/en/coins/pulsex" rel="noopener noreferrer nofollow" target="_blank">CoinGecko</a>.
 </figcaption>
</figure>
The recent exploit was part of a series of attempts against relatively small DeFi apps. Targeting niche tokens makes it more difficult for hackers to swap and mix their funds. However, in the case of BetterBank, the contract contained low-hanging fruit for generating low-value liquidity, inviting hackers to drain the protocol. Based on a previous Cryptopolitan <a href="https://www.cryptopolitan.com/usual-protocol-pauses-contract-usd0-exploit/" rel="noopener noreferrer nofollow">report</a>, hackers often target swap or bridge contracts for the ability to generate or withdraw unauthorized liquidity.
Overall, the reputation and market price losses were much higher compared to the final haul of the hacker, even if the attacker managed to liquidate the stolen stablecoins.&nbsp;
The hacker still managed to move <a href="https://etherscan.io/address/0xf3ba0d57129efd8111e14e78c674c7c10254acae" rel="noopener noreferrer nofollow" target="_blank">215 ETH</a> stored on the Ethereum chain, making it easier for the funds to be mixed or swapped.&nbsp;
Your crypto news deserves attention - <a href="https://keydifference.com/wire/pricing/?utm_source=cp&amp;utm_medium=web&amp;utm_campaign=inlineads2" target="_blank" rel="noopener noreferrer nofollow">KEY Difference Wire</a> puts you on 250+ top sites

BetterBank exploited for $5M through unauthorized bonus minting

Table of Contents

Cryptopolitan_News

Other articles published on Aug 27, 2025

Join our free newsletter for daily crypto updates!