SlowMist 警报：NemTokenV2 遭攻击，NEM 损失约 82.19 万美元
🚨SlowMist TI Alert🚨 💸 $NEM Loss: ~$821,920 🔍 Root Cause: NemTokenV2 credited transfers into the LP pair as sell volume without verifying swap settlement. These credits remained valid after the transferred tokens were removed via skim(), allowing flushLpSellRecycle() to burn pre-existing LP reserves. The attacker repeated transfer→skim→flush 42 times, reducing the pair’s NEM balance and syncing the lower reserves, then sold the remaining NEM at the inflated price to extract USDT. 📌 Attacker: 0xfd929b0f270dfea6c4827262b4e2bf6ea50fe9b6 📌 Attack Contract: 0x5e6d1f40be466dd2facc94a26818948ecd3b1ca2 📌 Vulnerable Contract: 0x9cf0e3ad4efa7ab602d7b5a38c55795cfa777777 (NemTokenV2) 📌 Victim Pair: 0x840e19dcca541ee0b55a3c67e900a39d523b12b8 (PancakePair USDT/NEM) Powered by http://SlowMist.AI Tx: https://bscscan.com/tx/0xfb093c96c0094cbcca10801f97ed2e5ed3d96550ce64b544df5a349545723f91
SlowMist 监测到 NemTokenV2 因将转入 LP 对的转账计为卖出量而未验证 swap 结算，遭攻击损失约 821,920 美元。攻击者重复 transfer→skim→flush 42 次压低 PancakePair USDT/NEM 池中 NEM 余额并同步储备，再以抬高价格卖出剩余 NEM 换取 USDT。
来源：SlowMist_Team · x.com