Movie Token's extractFromPoolForLpMining function burned tokens directly from the PancakeSwap MT/WBNB LP pair without the pair's knowledge. Combined with a flash swap callback, this allowed the attacker to collapse the pool's MT reserve from 6.76M to 21K, enabling massive sell orders at inflated prices.