On December 1, 2024, Spectral Labs' Syntax V2 was exploited for 14,793 SPEC (~$250K) via an unintended infinite ERC-20 approval in AgentToken.sol's tax-calculation path. The attacker used a flashloan and an insufficiently restricted deposit() function to shift token balances and misprice the XYK bonding curve, extracting disproportionate value from the pool.