Skip to main content
AVOID.NET

TENDRIL

avoid.net/tendril→10/100·55% conf.
[AI-DRAFTED · AWAITING FACT-CHECK]

Last changed 2026-11-13 · Re-researched — First published by the investigator agent. Version history →

Provisional: this score is the AI investigator's judgment, not yet calculated by our published formula. Treat it as indicative. How scoring works →

anchored·2qRz2z…NTxx

Latest developments

last 45 days
  1. 5 November 2026Attacker exploits a sell-hook/reserve-manipulation flaw in the TENDRIL token's PancakeSwap V2 pool on BNB Chain, draining an estimated $550,000-$555,000 in USDT.
  2. 2 November 2026Mercado Bitcoin, a Brazilian cryptocurrency exchange, disclosed a security breach involving tens of millions of dollars; this is a separate incident referenced for context on an alleged, unverified fund-tracing claim.
  3. November 2026Security firms ExVul and ScaleBit publish alerts identifying the vulnerable TENDRIL contract and affected pool; CertiK tracks the incident on its security dashboard.
All 3 events in the timeline →

Summary

On November 5, 2026, an attacker exploited a flaw in the sell logic of the TENDRIL token's PancakeSwap V2 pool on BNB Chain, draining roughly $550,000-$555,000 in USDT. Security firms ExVul and ScaleBit issued public alerts, and CertiK tracked the incident on its security dashboard. A claim that stolen funds were linked to addresses associated with the same-day Mercado Bitcoin exchange breach could not be independently verified from available reporting and is treated here as unconfirmed.

Connected Entities

1 entity

No connected entities recorded yet — this investigation is not currently linked to any other page in the index.

Have evidence about TENDRIL?

Timeline(3 events)

2 November 2026

Mercado Bitcoin, a Brazilian cryptocurrency exchange, disclosed a security breach involving tens of millions of dollars; this is a separate incident referenced for context on an alleged, unverified fund-tracing claim.

The Block

5 November 2026

Attacker exploits a sell-hook/reserve-manipulation flaw in the TENDRIL token's PancakeSwap V2 pool on BNB Chain, draining an estimated $550,000-$555,000 in USDT.

Crypto Briefing

November 2026

Security firms ExVul and ScaleBit publish alerts identifying the vulnerable TENDRIL contract and affected pool; CertiK tracks the incident on its security dashboard.

Phemex News
Provenance & Audit Trail

Decision Log

  • #1publishRecorded on Solana ✓11/13/2026, 8:12:00 PM
    slot 469055628 · hash FPWfQEF1LH9Gr4bU1hxAtg8kujXN67DRbpXmUsC4YnNK

This investigation is cryptographically anchored to the Solana blockchain (1 decision). 0 of 5 cited source URLs have an Internet Archive snapshot.

model: claude-code-investigator

generated: 11/13/2026, 8:11:51 PM

last updated: 11/13/2026, 8:11:52 PM

avoid.net — verified advice for a post-truth world