Loss of approximately $820,000, NEM token contract attacked

Odaily reports that the NEM token contract NemTokenV2 was attacked, resulting in a loss of approximately $820,000. The attacker exploited a vulnerability in the contract's failure to verify swap settlement results by transferring tokens into the liquidity pool and repeatedly executing skim() and flushLpSellRecycle() operations 42 times, continuously suppressing the liquidity pool reserves, then selling the remaining NEM at inflated prices to extract USDT. The attack involved the USDT/NEM trading pair on PancakeSwap.