NEM token contract NemTokenV2 exploited for about $820,000

Odaily reported that the NEM token contract NemTokenV2 was exploited, with losses estimated at about $820,000. The attacker abused a flaw in which the contract did not verify swap settlement results. After moving tokens into a liquidity pool, the attacker repeatedly called skim() and flushLpSellRecycle() 42 times, steadily pushing down the pool’s reserves. The remaining NEM was then sold at an inflated price to extract USDT. The incident involved PancakeSwap’s USDT/NEM trading pair. The report did not disclose additional recovery details or follow-up measures.