BYC token on BSC was exploited through a vulnerability in its autoBurnLiquidity function. The attacker manipulated the lpBurnFrequency parameter by performing large USDT-for-BYC swaps to inflate the parameter value, then called autoBurnLiquidity to reduce the BYC reserve to 1, enabling drainage of all USDT from the liquidity pool.