On February 11, 2025, four.meme was exploited when an attacker created a malicious PancakeSwap V3 pool with an inflated sqrtPriceX96 parameter (368 trillion times correct). Four.meme's migration logic used the pool without verification, allowing the attacker to drain WBNB by providing minimal tokens at the fake price.

The memecoin platform Four.Meme was attacked. According to an analysis by the SlowMist security team, the attacker was able to execute a frontrunning attack by pre-creating a liquidity pool on PancakeSwap v3 with an extremely high token price. When the token was integrated into PancakeSwap v3, liquidity was added based on the unbalanced pool set up by the attacker. Since the project team did not verify the pool's price, the added liquidity followed the maliciously set price. As a result, the attacker was able to exploit this mechanism to drain assets from the pool.