Attacker exploited a flaw in Nerve Bridge's MetaPool swap function where the swap function underestimated LP token value compared to swapUnderlying. Using a flash loan attack, the attacker received inflated LP tokens for deposited fUSDT, then removed BUSD liquidity and used swapUnderlying to extract additional fUSDT for a total profit of 900 BNB.