BlockSec reports a $24,200 loss due to a vulnerability in the MT token on the BSC chain.

ChainCatcher report: According to BlockSec monitoring, its system detected a suspicious transaction targeting the MT-WBNB pool on BSC, with an estimated loss of approximately $242,000. The vulnerability stemmed from a flaw in the buy restriction mechanism: under deflationary mode, normal buy transactions were reverted, but routers and trading pairs were whitelisted, allowing attackers to bypass restrictions by swapping via routers and removing liquidity to extract MT from the pair. The attacker then sold MT to accumulate pendingBurnAmount and called distributeFees() to directly burn MT from the trading pair, artificially inflating the price, before swapping the MT back to WBNB for profit. Additionally, a referral rule permitting the first 0.2 MT transfer to bypass buyer restrictions enabled the attacker to initiate the attack.