PGNLZ's flawed burn mechanism allowed attackers to burn tokens directly from the PancakeSwap USDT-PGNLZ pool's balance without proper synchronization. This artificially reduced pool reserves, creating sharp price distortions that enabled attackers to execute reverse swaps and drain approximately $100K in USDT.

According to BlockSec monitoring, an unknown contract on the BSC network was exploited. The attacker leveraged a design flaw in the “burn pair” mechanism to execute two reverse swaps, resulting in losses of approximately $100,000. The attacker first drained PGNLZ tokens, then triggered PGNLP burns and price manipulation, ultimately siphoning off most of the USDT from the liquidity pool.