SlowMist: NEM Token Exploit Drains ~$821,920 via PancakeSwap Pool Manipulation

The exploit's mechanics—repeated skim() calls to drain pool reserves before selling at an inflated price—point to a token-level design flaw rather than a PancakeSwap failure, which matters for how other custom contracts with similar recycle or flush functions are assessed. The published addresses give on-chain analysts a concrete trail to trace the attacker's funding and cash-out path. Whether the NEM team can pause or migrate the vulnerable contract, and how PancakeSwap-linked pools price the token now, are the open questions.