NEM Token Contract Exploited on BSC via PancakeSwap Liquidity Pool

The NEM (NemTokenV2) token contract on the Binance Smart Chain (BSC) was exploited through its PancakeSwap USDT/NEM liquidity pool. The exploitation involved a flaw in the contract that allowed the attacker to credit transfers into the liquidity pool as sell volume without verifying the actual settlement of swaps. This manipulation enabled the attacker to execute a series of transactions that ultimately led to the extraction of funds.

The attacker performed the exploit by executing the transfer, followed by the skim() and flushLpSellRecycle() functions, a total of 42 times. This sequence of actions resulted in the burning of pre-existing liquidity pool reserves and the synchronization of lower reserves. Consequently, the attacker was able to sell the remaining NEM tokens at an inflated price, leading to a significant financial gain.

The total loss from this incident was approximately $821,920 in USDT. The use of the BSC chain for this exploit means that the transactions can be traced on this blockchain, providing a record of the actions taken by the attacker. However, the specific addresses involved in the transactions are not detailed in the provided information.