CertiK: TENDRIL pool attack causes approximately $555,000 in net losses

CertiK reported that an attack on a TENDRIL liquidity pool on November 5 caused a net loss of approximately $555,000, revising higher an earlier TenArmor Alert estimate of about $309,000 for the same transaction. The exploit abused TENDRIL's sell hook, which let the seller deduct the trading pair's token balance and sync reserves before the remaining sold tokens arrived; those tokens then triggered a swap that drained nearly all USDT from the pool. The incident adds to a steady stream of DeFi exploits targeting hook and callback logic in pool contracts. What to watch next is whether TENDRIL pauses the pool, restores liquidity or reimburses LPs, and whether similar hooks in other pools face review.