CertiK flags $820K exploit draining NEM token’s PancakeSwap liquidity pool

CertiK flagged an attack against the NEM token on BNB Chain on October 22, 2026, which drained the USDT/NEM liquidity pool on PancakeSwap. According to SlowMist, the attacker exploited an accounting flaw in the NemTokenV2 contract’s sell-tracking mechanism 42 times, allowing excess funds to be withdrawn from the pool. The attacker then bridged the stolen funds to Ethereum after artificially pushing up the token’s price. CertiK estimated the losses at approximately $820,000, while SlowMist put the damage at $821,920, with liquidity providers bearing the direct losses.

Source: Read the original article