UEarnPool on BSC was exploited using a flash loan to repeatedly manipulate the invitor reward distribution mechanism. The attacker inflated their staked ratio by calling the public bindInvitor() function multiple times, allowing the protocol to allocate portions of staked amounts to controlled invitor accounts. Each staking round distributed rewards while allocating the claimable reward back to the attacker.