KaoyaSwap's swap function had faulty logic allowing attackers to manipulate token calculations. Using a flashloan, an attacker exploited the vulnerability to extract value from the protocol's swap mechanism.

Kaoyaswap on BSC appears to have been attacked, with hackers making 37,294 BUSD and 271.2 WBNB, caused by faulty logic in the Swap function.