HMS

DESCRIPTION OF EVENTS

HMS appears to be short for HMagician. The HMS smart contract was created on August 12th, 2025.

Unfortunately, the burn logic of the HMS smart contract burn mechanism was vulnerable.

The issue was reportedly related to the burn mechanism of the smart contract being exploited.

TenArmor reports "an approximately loss of $94.6K".

There is no suggestion that the project has reacted to the compromise publicly.

TenArmor published a report with an overview of the exploit.

There is no indication that any funds have been recovered.

There could be an investigation to trace the funds, or return to users.

Explore This Case Further On Our Wiki

A recently deployed HMS (short for HMagician) smart contract contained a vulnerability in its burn mechanism. This flaw was exploited, leading to an estimated loss of approximately $94.6K, according to a report by TenArmor. The project does not appear to have a public presence, and there is no indication that any of the stolen funds have been recovered. TenArmor has published a detailed overview of the exploit, and while no official recovery efforts have been confirmed, an investigation may be underway to trace or return the funds.

Ten Armor - "Our system has detected a suspicious attack involving #HMS on #BSC, resulting in an approximately loss of $94.6K. It appears that the #HMS token's burn mechanism was exploited." - Twitter/X (Aug 25)
Attack Transaction - BSCScan (Aug 25)
HMS Smart Contract - BSCScan (Aug 25)
HMS Smart Contract Creation - BSCScan (Aug 25)

More case studies

ABCCApp USDT Overclaim addFixedDay
Access Control Missing

None