BlockSec: BSC On-Chain MT-WBNB Liquidity Pool Suffered Attack with Loss of Approximately $242,000

Deep Tide TechFlow News, March 10 — According to BlockSec Phalcon monitoring, the MT-WBNB liquidity pool on the BSC chain was attacked, resulting in a loss of approximately $242,000. The attack stemmed from a flaw in the token deflation mechanism’s buyer restriction system: regular purchase transactions would be rolled back, but the router and trading pair addresses were whitelisted. The attacker exploited this vulnerability to swap and remove liquidity via the router to acquire MT tokens from the trading pair. Subsequently, the attacker sold the accumulated MT tokens slated for burning and called the distributeFees() function to directly burn MT from the trading pair, artificially inflating the price, then exchanged MT for WBNB to profit. Additionally, the referral rule allowed the first transfer of 0.2 MT to bypass buyer restrictions, providing the attacker with an initial operational condition.