Article

SlowMist:NEM losses of approximately 820000 USD, with the attacker profiting by repeatedly manipulating the liquidity pool

PANews October 22 reported that SlowMist issued a security alert stating that the NEM token contract NemTokenV2 was attacked, with losses of approximately 821,920 USD. The attacker exploited a vulnerability whereby the contract failed to verify swap settlement results, transferring tokens into the liquidity pool and repeatedly executing skim()and flushLpSellRecycle()operations. These operations were repeated 42 times, continuously driving down the liquidity pool reserves, after which the attacker sold the remaining NEM, extracting USDT. The attack involved PancakeSwap USDT/NEM trading pairs. SlowMist has published the attacker, the attack contract, and the address of the vulnerable NemTokenV2 contract.

Source: https://www.panewslab.com/zh/articles/01a16316-3935-777e-8dd2-965ee68e99d5