swapX on BSC was exploited through a lack of access control in the 0x4f1f05bc function. The attacker repeatedly called this function to manipulate DND token prices and drain approximately $1M from user wallets that had approved the contract.