BlockSec: BSC Chain MT Token Purchase Limit Flaw Leads to Attacker Profiting Approximately $242,000

Techub News reports, according to BlockSec monitoring, a suspicious transaction targeting the MT-WBNB trading pool was detected on BSC several hours ago, estimated to have caused approximately $242,000 in losses. The root cause lies in a flaw in the buy restriction mechanism, where normal buys in deflation mode were reverted, but the router and pair addresses were whitelisted. The attacker bypassed the restriction through router swaps and liquidity removal to obtain MT tokens from the trading pair. Subsequently, the attacker sold MT to accumulate pendingBurnAmount and called distributeFees() to burn MT from the trading pair, artificially inflating the price, then swapped MT back to WBNB for profit. Additionally, a referral rule allowing the first 0.2 MT transfers to bypass restrictions enabled the attack to be initiated.