iVest

On August 12, 2024, iVest token on BSC was exploited via a business logic flaw in its custom ERC20 transfer function. The __MakeDonation function, invoked during token transfers, had vulnerabilities that allowed attackers to manipulate token prices and extract value through the donation mechanism.