YON token's transferFrom function lacked proper permission validation, allowing an attacker's contract to drain tokens directly from the liquidity pool shortly after deployment. Attackers exploited this to steal 190 BNB.

YON on BNBChain was exploited and lost 190 BNB (～$118K) as a result. The vulnerability in the transferFrom function of the target contract (YON) allowed the attacking contract to directly transfer YON to the LP contract.