🚨SlowMist TI Alert🚨 DTXT/USDT Pair on BSC Drained Due to Spoofable Liquidity-Addition Detection Logic Root cause: DTXT determines whether an action is liquidity addition, liquidity removal, or a sell by comparing the difference between USDT.balanceOf(pair) and the Pair’s reserves. The attacker was able to transfer a tiny amount of USDT directly to the Pair, causing a large DTXT sell to be misclassified as liquidity addition, thereby bypassing the sell fee / swapFee logic. Primitive: Flash-loan-assisted liquidity addition/removal + 1 wei USDT Pair balance spoofing + direct Pair.swap to drain USDT. Profit: Approximately 35,041.106 USDT, after repaying a 1,077,366.001021 USDT flash loan from Moolah. Related wallet addresses: Attacker EOA: 0xd304ea1592f733e0a46436a01fe54bd504009526 Attack contract: 0x3065bc8ed8bd53bdc3fd4633c3097c40726b5f5f Helper: 0xd2453ff82e1c5b568ddb260f1f0bb95169895428 DTXT: 0xac9bf7c320d4ce2d0ac978b83955dd67351897d2 DTXT/USDT Pair: 0x90bfc1dbc878ba54858ba8a635b3daebd2ac6c01 Tx: https://bscscan.com/tx/0x07ba2ccf2b5c1aaca4c017af4fe87762a73ef7177f6ea8bb569367e908a0671d(SlowMist)