IEXCBP

IEXCBP's reward withdrawal logic valued USD-denominated rewards using Pancake's live spot price quotes. An attacker flash-loaned WBNB and USDT, posted WBNB as collateral on Venus to borrow larger USDT amounts, then recycled capital through helper accounts interacting with IEXCBP.

Each attacker-driven IEX token sale affected subsequent accounts' payout calculations, allowing complete reward pool draining through Pancake spot price manipulation.