A wallet can display a dollar balance for fake USDT that its holder cannot sell. Forta, a blockchain security firm, published a Nov. 10, 2026 investigation identifying 32 counterfeit dollar tokens on BNB Chain whose prices sat near $1 inside PancakeSwap Infinity pools, while simulated outsider sell orders were refused in all 32 pools at the midpoint of each pool's active window.
Why Is This Happening Now?
Forta's researchers traced the pricing mechanism to PancakeSwap Infinity pools that pair counterfeit tokens with real USDT. Automated wallets, which the researchers call keepers, repeatedly made small round-trip trades, so the most recent trade kept the pool quotation close to a dollar. The pools' swap hooks restricted trading to wallets on the operators' allowlists.
PancakeSwap's developer documentation describes callbacks that run before or after actions such as swaps, with the hook and its callback permissions specified when a pool is initialized. Forta's findings concern how particular pools used that flexibility, not a flaw in the standard itself. A recent trade sets the price for that trade, so reading the pool's last price can produce an apparently stable dollar quotation without providing a usable exit.
The investigation was published on Nov. 10, 2026, and it covers the 32 pools Forta identified rather than every market on the chain. That distinction matters for anyone who treats a wallet balance as evidence of value rather than as a quotation from a price source.
How Does It Affect Market Liquidity and Holders?
The gap Forta documented is between displayed value and realizable value. When the researchers simulated an outside wallet trying to sell at the midpoint of each pool's active window, all 32 rejected the swap. Keeper wallets sustained the prices through restricted trading, which separates the dollar figure a wallet can show from the amount an ordinary holder can obtain through the market supplying that price.
Forta estimates the wider network's $22 million as counterfeit payment face value, not confirmed losses or a victim count. The practical exposure sits with anyone accepting crypto without delivering the genuine asset: a familiar token name, a completed transfer and a convincing balance can all appear together. For a merchant, the risk is asymmetric, because the transfer confirms and the balance renders while the loss surfaces only when the recipient tries to convert.
Liquidity in these pools is not absent; it is permissioned, and permission does not extend to the seller holding the counterfeit. Broader stablecoin supply trends matter here too, as covered in our analysis of the $14.2 billion drop in stablecoin supply over 30 days.
How Do You Spot Fake USDT Before You Accept It?
Contract address, not ticker, is the first check. Genuine USDT on BNB Chain is issued at a specific contract, and a token that borrows the name while running different code is a separate asset regardless of what a wallet labels it. A second check is a live exit test: send a small amount to a public route before accepting size.
Forta's simulations show why a quote alone proves little, because the pools it examined returned a dollar price to any reader while refusing outsider sales. Wallet balances are quotations from a price feed, not guarantees of settlement. The limits of the research are explicit as well. Forta tested 32 identified pools at the midpoint of each active window, which is not a census of every counterfeit market or every hour of trading.
What Are the Key Risks and Downside Triggers?
Three triggers could turn a quiet pricing quirk into a wider problem. First, price feeds and portfolio trackers that read last-trade prices from Infinity pools can keep marking counterfeit tokens near $1, extending the gap between what a screen shows and what a holder can realize. Second, hook-based permissioning is a legitimate design feature, and the same flexibility is available to anyone who initializes a pool. Third, the market backdrop is fragile: the Crypto Fear & Greed Index read 10/100, Extreme Fear, on Nov. 15, 2026, a level at which counterparty trust is already thin.
Downside catalysts to watch include a holder attempting a public exit and failing, a feed provider removing Infinity pool inputs from its pricing, and payment processors flagging the 32 contracts. None of those events is confirmed. The $22 million figure describes face value, and Forta does not publish a loss estimate or a victim count.
Data Snapshot & Immediate Catalysts
The table below collects the verified readings from Forta's Nov. 10 report and the current sentiment gauge.
Key Benchmark Comparison (Metric | Reading | Source and context)
- Counterfeit dollar tokens identified: Reading: 32 | Source and context: Forta, Nov. 10, 2026
- Network: Reading: BNB Chain | Source and context: Forta
- Trading venue: Reading: PancakeSwap Infinity pools | Source and context: Forta
- Simulated outsider sells rejected: Reading: 32 of 32 | Source and context: Forta, tested at midpoint of active window
- Estimated counterfeit payment face value: Reading: $22 million | Source and context: Forta, not losses or victim count
- Crypto Fear & Greed Index: Reading: 10/100, Extreme Fear | Source and context: Alternative.me, Nov. 15, 2026
Immediate catalysts include any PancakeSwap guidance on hook permissions, any Forta follow-up expanding beyond the 32 pools, and any revision to how price aggregators weight Infinity pool trades. Chain-level context for activity on the network is in our comparison of Ethereum, Base, Solana and BNB Chain DeFi metrics. The full Forta write-up is available through CryptoSlate's report on the investigation.
Frequently Asked Questions
Can a wallet really show a dollar balance for fake USDT?
Yes. Forta found 32 counterfeit dollar tokens on BNB Chain whose prices were held near $1 by allowlisted keeper wallets trading in PancakeSwap Infinity pools. A wallet or price feed reading the pool's last trade can display a dollar figure even though simulated outsider sell orders were rejected in all 32 pools.
Does the $22 million figure mean $22 million was stolen?
No. Forta describes the $22 million as counterfeit payment face value across the wider network, not confirmed losses or a victim count. The firm did not publish a loss estimate.
How can I check whether USDT in my wallet is genuine?
Verify the token contract address against the issuer's records rather than trusting the ticker, then test a small sale into a public route before accepting a large transfer. Forta's tests covered 32 identified pools at the midpoint of each active window, not every market or every time.
Related Research
Primary Sources
- Your wallet may show a dollar balance for fake USDT that you cannot sell (CryptoSlate)
- Crypto Fear & Greed Index — Alternative.me (Alternative.me)
Disclosure: This market analysis is provided for informational and educational purposes only and does not constitute financial or investment advice.