A contract on the BSC blockchain was attacked due to a design flaw, resulting in a loss of approximately $100,000.

BlockSec Phalcon announced on the X platform that its system detected an attack on an unknown contract on the BSC chain, resulting in a loss of approximately $100,000. The root cause was a design flaw in the burn pair mechanism. The attacker carried out the attack through two reverse swaps: first, by withdrawing 99.56% of the PGNLZ tokens from the pool through the first swap; then, during the second swap when selling PGNLZ, the transferFrom function triggered the destruction of 99.9% of the PGNLP tokens and executed a sync operation, causing the PGNLP price to rise. The attacker then used the manipulated price to withdraw almost all of the USDT from the pool.