Another BSC token just got drained because of a bug in its own code. DIP lost $111,000 today.
The flaw was in how the token handled transfers. Certain trades through PancakeSwap got counted twice, which let the attacker drain the same reserves twice over and rewrite the token's price in the process.
From there it was simple. They borrowed a pile of the paired token, bought DIP, skewed the pool, and walked off with 29 million tokens worth $111,000.
It's the most common exploit on BSC there is. Not the exchange, not the chain, just one sloppy line in a token contract that someone read closely enough to break.
Onchain the code is the bank, the vault, and the lock all at once. When one line is wrong, there's nothing standing between the money and whoever spots it first.
