Attacker exploited AutoShark's swap mining reward calculation using large-volume trades via flash loan. By performing multiple swaps in a single block to accumulate 3.18M FINS tokens, the attacker bypassed the single-transaction mitigation measures that AutoShark had previously deployed after an earlier attack.