WhaleBit's staking system was exploited through same-transaction spot price depression via flash loan, where the attacker dumped CES tokens into the Algebra pool to depress price and inflated staking redemption payouts by 14.4-15.7%.