Contract on BSC Chain Exploited Due to Design Flaw, Resulting in Approximately $100,000 in Losses

Odaily News: BlockSec Phalcon posted on platform X that its system detected an attack on an unknown contract on the BSC chain, leading to losses of approximately $100,000. The root cause was a design flaw in the burn pair.

The attacker carried out the exploit through two reverse swaps: first, extracting 99.56% of the PGNLZ tokens from the pool via the initial swap; subsequently, during the second swap when selling PGNLZ, the transferFrom function triggered the burning of 99.9% of the PGNLP tokens and executed a sync operation, causing the price of PGNLP to rise. The attacker then extracted nearly all the USDT from the pool by exploiting the manipulated price.