The 79thVault team confirmed the recovery on X and shared an on-chain transaction associated with the returned BNB. According to the project’s announcement, the team intends to return the recovered funds to the liquidity pool and permanently burn the resulting LP tokens, a measure designed to prevent those tokens from circulating or being used to claim the corresponding liquidity.
The attack began on October 7, when an operator wallet withdrew approximately 2.01 million 79AU tokens from the project’s PancakeSwap pool. The attacker executed seven transactions between 07:25 and 08:25 UTC before selling the tokens through roughly 95 trades.
Those sales generated approximately 16,249 BNB, valued at around $12.5 million based on the reported figures. Meanwhile, the pool’s USDT reserves fell from approximately $15.2 million to $3.9 million, significantly reducing the liquidity available to traders.
In an October 8 statement, 79thVault attributed the incident to weaknesses in account permission management. Reports indicated that the 79AU contract contained an OPERATOR_ROLE function capable of moving tokens from the pool and modifying its reserves. The relevant permission was subsequently revoked.