TheNFTV2 contained a business logic flaw in its withdrawal mechanism that incorrectly calculated user shares and balances. An attacker exploited the logic error to withdraw more assets than their proportional stake, extracting funds from the protocol.