SlowMist|10月 22, 2026 09:53
🚨SlowMist TI Alert🚨
💸 NEM Loss: ~$821,920
🔍 Root Cause: NemTokenV2 credited transfers into the LP pair as sell volume without verifying swap settlement. These credits remained valid after the transferred tokens were removed via skim(), allowing flushLpSellRecycle() to burn pre-existing LP reserves. The attacker repeated transfer→skim→flush 42 times, reducing the pair’s NEM balance and syncing the lower reserves, then sold the remaining NEM at the inflated price to extract USDT.
📌 Attacker: 0xfd929b0f270dfea6c4827262b4e2bf6ea50fe9b6
📌 Attack Contract: 0x5e6d1f40be466dd2facc94a26818948ecd3b1ca2
📌 Vulnerable Contract: 0x9cf0e3ad4efa7ab602d7b5a38c55795cfa777777 (NemTokenV2)
📌 Victim Pair: 0x840e19dcca541ee0b55a3c67e900a39d523b12b8 (PancakePair USDT/NEM)
Powered by http://SlowMist.AI
Tx: https://bscscan.com/tx/0xfb093c96c0094cbcca10801f97ed2e5ed3d96550ce64b544df5a349545723f91
Share To
Timeline
HotFlash
APP
X
Telegram
CopyLink