According to CoinMeta, as monitored by the SlowMist security team, the NEM token contract ( nemtokenv2 ) was attacked by hackers, resulting in a loss of approximately $821,920. The attackers exploited a vulnerability in the unverified exchange settlement process, repeatedly executing the transaction sequence transfer → skim → flush a total of 42 times. This significantly reduced the reserves of NEM in the PancakePair USDT / NEM pool and simultaneously lowered the reserve amounts. Subsequently, they sold off the remaining NEM at the manipulated and inflated prices to exchange for USDT and made a profit before exiting the market.