LAXO token's flawed burn mechanism allowed an attacker to execute a burn-before-sync exploit via flash loans. By burning LAXO directly from the PancakeSwap pool without triggering a reserve sync, the attacker artificially collapsed pool reserves and extracted 487k USDT through manipulated swaps.