An attack on the BNB Chain token TENDRIL drained nearly all USDT from PancakeSwap V2’s TENDRIL/USDT pool on the 5th, causing an estimated net loss of about $555,000. The attacker combined sell processing with token burns to alter the pool balance before transfers were completed, distorting the trading price. ExVul and ScaleBit issued warnings on the 5th, while TenArmorAlert initially estimated the loss at about $309,000. An earlier account from BlockSec described a roughly $30.64 million USDT flash loan, manipulation of the liquidity ratio and a remaining reserve of 4.42 million USDT; it also linked the exploit to TENDRIL’s custom sell hook, including a 30% sell tax and a vulnerability in the _poolControl contract that could trigger controlburn() and sync(). That account estimated the attacker’s net profit at about $308,960 and dated the incident November 5, 2026.