An attacker exploited CFC's custom transfer logic on a Uniswap V2-style pool by repeatedly transferring tokens to the pair and invoking skim(), triggering the _transfer() function to burn tokens. This reduced the LP pair's actual token balance, allowing the attacker to extract value through the token supply manipulation.