A new DeFi exploit landed on November 4, 2026 — small in dollars, textbook in method, and worth understanding precisely because the method keeps working. An attacker used a flash loan to manipulate CoreVault's price oracle on BNB Smart Chain, then drained the protocol's InsurancePool of 160.26 BNB, worth about $112,200 according to CertiK's security dashboard, with research compiled on...
