Little Boy Plus - BSC DeFi Logic Exploit

Summary

Little Boy Plus (LBP) is a DeFi mining protocol on BNB Smart Chain that marketed itself as fully decentralized with no team, no pre-mine, and no admin keys, built around a fixed 21 million LBP token supply. On June 17–18, 2026, an attacker exploited a logic flaw in the protocol's LBPHashrate contract to artificially mint reward tokens and drain approximately $377,642 USDT (roughly 610.6 BNB) from the LBP/USDT PancakeSwap liquidity pair. No post-incident statement or recovery effort was announced by the project as of publication.