NEM Token Exploit Drains About $821,900 From PancakeSwap Pool

An attack on a NEM token contract caused about $821,900 in losses on Oct. 22, stemming from a flaw in how the contract recorded sales. The affected market was PancakeSwap’s USDT/NEM pair. The defect was in NemTokenV2: it counted tokens transferred into the liquidity pool as sell volume without checking whether a swap had settled. That accounting gap let the attacker repeat the sequence. The attacker transferred tokens to the pool, called skim() to remove excess tokens and triggered flushLpSellRecycle().

Source: TokenPost