The BNB Chain-based NemTokenV2 contract was exploited for approximately $821,920 through PancakeSwap’s USDT/NEM liquidity pool, according to SlowMist. The vulnerability allowed the attacker to transfer tokens into the pool without the contract properly validating swap settlement results, then repeatedly call skim() and flushLpSellRecycle() 42 times to drain reserves. The depleted liquidity artificially inflated NEM’s price before the attacker sold remaining holdings for USDT. CertiK had previously described the issue as faulty accounting that misclassified transfers into PancakeSwap’s pool as sell transactions, involving the pendingLpSellRecycle mechanism. The stolen assets were subsequently bridged to Ethereum, and SlowMist published addresses linked to the attacker, exploit contract and vulnerable NemTokenV2 contract. The incident followed comparable 2026 attacks involving BNB Chain tokens including Movie Token, ATM and LULA.