Attacker exploited the same MetaPool vulnerability in Nerve Finance that previously affected Synapse Bridge. Using flash loan attacks on fUSDT and UST MetaPools, the attacker exhausted pool liquidity by exploiting the inconsistent calculation of LP token value between swap and swapUnderlying functions.

The Nerve cross-chain bridge MetaPool was attacked. This attack was an exploit of the logical vulnerabilities of fUSDT and UST MetaPool on the Nerve cross-chain bridge BSC, causing the fUSDT and UST liquidity in the Nerve staking pool to be exhausted, and the attacker made a profit of about 900 BNB . The attacked contract code Fork is from Saddle.Finance.