BurgerSwap exploited May 28, 2021 for $7.2M in BURGER, WBNB, and USDC. Missing code line in Uniswap V2 fork enabled reentrancy. Attacker created a fake token to manipulate price, then executed profitable swaps funded by a PancakeSwap flashloan.

BurgerSwap, an automatic market maker on the BSC chain, suffered a lightning loan attack and lost nearly 7 million U.S. dollars. This attack is a problem in the BurgerSwap architecture. Since the Pair layer completely trusts the data of the PaltForm layer, it did not perform another check on its own, which led to the attack.