On April 25, 2024, the FENGSHOU (NGFS) token on BSC was exploited via a public delegateCallReserves function with insufficient access control. An attacker set their own contract as the UniSwap proxy and executed arbitrary code within the vulnerable contract, extracting approximately $191K.