BlockSec: BSC On-Chain MT-WBNB Liquidity Pool Suffered Attack with Loss of Approximately $242,000

Deep Tide TechFlow News, March 10 — According to BlockSec Phalcon monitoring, the MT-WBNB liquidity pool on the BSC chain was attacked, resulting in a loss of approximately $242,000. The attack stemmed from a flaw in the token’s deflationary buyback mechanism: regular purchase transactions would be rolled back, but the router and trading pair addresses were whitelisted. The attacker exploited this vulnerability to swap and remove liquidity via the router to acquire MT tokens. Subsequently, the attacker sold the accumulated MT tokens slated for burning and called the distributeFees() function to directly burn MT from the trading pair, artificially inflating the price. The attacker then exchanged MT back to WBNB for profit. Additionally, the referral rule allowed the first transfer of 0.2 MT to bypass the buy limit, providing the attacker with initial operational conditions.