Ramses' reward distribution mechanism failed to decrease tokenTotalSupplyByPeriod after reward claims, allowing attackers to claim rewards repeatedly across multiple NFT positions and drain accumulated incentives and fees.

The contract of Ramses Exchange on Arbitrum was attacked, resulting in a loss of approximately $93,000.