GSS

On August 24, 2023, GSS token on BSC was exploited via a vulnerability in its _transfer() function. An attacker flash-loaned 30,000 BUSDT from DODO and swapped to 725,246 GSS tokens.

By transferring tokens to specific pair addresses and calling skim(), the attacker caused 707,162 tokens to be withdrawn twice from the liquidity pool, an arithmetic error in the custom transfer logic.