Odaily reported that the NEM token contract NemTokenV2 was exploited, with losses estimated at about $820,000. The attacker abused a flaw in which the contract did not verify swap settlement results. After moving tokens into a liquidity pool, the attacker repeatedly called skim() and flushLpSellRecycle() 42 times, steadily pushing down the pool’s reserves. The remaining NEM was then sold at an inflated price to extract USDT. The incident involved PancakeSwap’s USDT/NEM trading pair. The report did not disclose additional recovery details or follow-up measures.
According to Odaily, the NEM token contract NemTokenV2 was exploited, with losses landing at about $820,000.
The attacker took advantage of a flaw: the contract did not verify swap settlement results. After moving tokens into a liquidity pool, the attacker called skim() and flushLpSellRecycle() 42 times in a row, steadily draining the pool’s reserves. Then the remaining NEM was sold at an inflated price to pull out USDT.
The attack used PancakeSwap’s USDT/NEM trading pair.
This article was originally published by Bit.Fan. For more cryptocurrency news and market insights, visit www.bit.fan. Disclaimer:
The market information, project data, and third-party content displayed on this platform are for industry information sharing only and do not constitute any form of investment advice or return commitment.
Cryptocurrency trading carries high risks. Users should fully assess their risk tolerance and make independent decisions. All profits, losses, and legal responsibilities are borne by the users themselves.
