Monitored by Woofun AI, the DIP token contract was exploited, resulting in losses exceeding $110,000. The breach stemmed from a missing return statement in the transfer() function, which allowed transactions interacting with PancakeSwap routing contracts to execute twice. This duplication enabled attackers to manipulate prices within associated liquidity pools.

Yu Xian, founder of SlowMist, emphasized that integrating AI tools into the code review process could have identified and mitigated this vulnerability prior to deployment. The malicious contract has been open-sourced and verified on BscScan, allowing the community to inspect the exploit mechanism.