BNB Smart Chain Protocol Little Boy Plus Loses $370,000 in Hack

Little Boy Plus is a DeFi yield-farming protocol deployed on BNB Smart Chain (BSC), using smart contracts to manage user assets and liquidity. Gaps in authorization checks can allow attackers to manipulate liquidity pools. The incident also highlights the importance of edge cases such as zero-value transfers in protecting on-chain assets.

Little Boy Plus was hacked on June 18, with estimated losses of about $370,000. Blockchain security firm SlowMist said the attacker exploited a flaw in a contract function, using zero-value transfers to bypass authorization checks and disrupt the liquidity balance before ultimately draining the protocol’s asset pool.