#CertiKInsight 🚨

We have seen an exploit of ~$243K on ATM token. The transferFrom() includes logic to swap 20% transfer amount of ATM for BSC-USD, so the attacker can repeatedly swap out extra after transfer.

Stay vigilant!

via x.com/CertiKAlert

Someone shipped a transferFrom() that hands out a 20% bonus to anyone clever enough to loop it, and yes, people did loop it. $243K gone because the ATM token's core function was basically a coupon that never expires.