The Scroll Token contract contained an arithmetic error in its transfer function allowing integer underflow from zero-balance addresses. Attackers exploited this to mint unlimited tokens, causing the price to collapse 99.99%.