FHToken was exploited through faulty sell-handling logic in its token contract. Reporting on the incident identifies a flaw in _transfer involving the isSell path, which incorrectly altered token balances during sell transactions. The attacker repeatedly bought and sold FH to exploit this behavior and extract value from the FH/USDT PancakeSwap V2 pool

FH Token on the BSC chain was exploited in its FH/USDT liquidity pool on PancakeSwap V2. A flaw in the token’s _transfer function and isSell logic caused incorrect token burns during sells, allowing the attacker to drain funds from the pool through repeated buy-and-sell loops, resulting in a loss of approximately $20,000.