LABUBU token's transfer function allowed the same address to be both sender and receiver, enabling balance inflation. The attacker borrowed tokens via a PancakeSwap V3 flash loan, repeatedly executed this flawed transfer to compound their balance, then swapped through multiple chains and mixed the proceeds.