SlowMist(@SlowMist_Team):🚨SlowMist TI Alert🚨 💸 $NEM Loss: ~$821,920 🔍 Root Cause: NemTokenV2 credited transfers into the LP pair as sell volume without verifying swap settlement. These credits remained valid after the transferred tokens were removed via skim(), allowing flushLpSellRecycle() to burn pre-existing LP reserves. The attacker repeated transfer→skim→flush 42 times, reducing the pair’s NEM balance and syncing the lower reserves, then sold the remaining NEM at the inflated price to extract USDT. 📌 Attacker: 0xfd929b0f270dfea6c4827262b4e2bf6ea50fe9b6 📌 Attack Contract: 0x5e6d1f40be466dd2facc94a26818948ecd3b1ca2 📌 Vulnerable Contract: 0x9cf0e3ad4efa7ab602d7b5a38c55795cfa777777 (NemTokenV2) 📌 Victim Pair: 0x840e19dcca541ee0b55a3c67e900a39d523b12b8 (PancakePair USDT/NEM) Powered by https://t.co/Mz5jOnx997 Tx:

2026.10.22 09:52

🚨SlowMist TI Alert🚨 💸 $NEM Loss: ~$821,920 🔍 Root Cause: NemTokenV2 credited transfers into the LP pair as sell volume without verifying swap settlement. These credits remained valid after the transferred tokens were removed via skim(), allowing flushLpSellRecycle() to burn pre-existing LP reserves. The attacker repeated transfer→skim→flush 42 times, reducing the pair’s NEM balance and syncing the lower reserves, then sold the remaining NEM at the inflated price to extract USDT. 📌 Attacker: 0xfd929b0f270dfea6c4827262b4e2bf6ea50fe9b6 📌 Attack Contract: 0x5e6d1f40be466dd2facc94a26818948ecd3b1ca2 📌 Vulnerable Contract: 0x9cf0e3ad4efa7ab602d7b5a38c55795cfa777777 (NemTokenV2) 📌 Victim Pair: 0x840e19dcca541ee0b55a3c67e900a39d523b12b8 (PancakePair USDT/NEM) Powered by Tx: