GPU token's balance update logic did not properly account for self-transfers, allowing attackers to arbitrarily inflate their balance by repeatedly transferring tokens to themselves. The vulnerability was amplified via flash loans.

GPU on BNBChain was attacked, with a loss of about $32,000. There is a logic vulnerability in the _transfer function of the contract. When transferring money to yourself, the balance will increase by the amount of the transfer.