On December 29, 2022, Jaypeggers (JAY token) on Ethereum was exploited through a reentrancy vulnerability. The buyJay function lacked proper validation and allowed the attacker to insert a malicious contract as an ERC-721 token. The attacker reentered through the sell function using a miscalculated price to profit approximately 15.32 ETH (~$18.5K).