CertiK flags $820K exploit draining NEM token’s PancakeSwap liquidity pool

Liquidity providers in the USDT/NEM pool are the direct losers, with roughly $820,000 in pooled value extracted through manipulated reserves rather than a hack of PancakeSwap's core code. Anyone holding the NEM-ticker token now holds a position in a contract whose sell logic has been shown to be exploitable, and traders need to check they are not confusing this asset with unrelated projects sharing the same ticker. Exchanges and aggregators listing the pair face pressure to pull or flag it.

PancakeSwap itself was not breached, which is the uncomfortable part: the exploit lived entirely inside one project's token contract, a reminder that an AMM's security is only as strong as the weakest custom code paired against it. Open listing without mandatory audits lets any team ship novel accounting logic straight into a liquidity pool holding real USDT, and CertiK's own advisory underscores that gap between permissionless deployment and the due diligence investors assume has already happened.

Watch whether 0xCERT or CertiK publish a follow-up identifying the attacker address and whether any funds get frozen or returned, as has happened in some past BSC pool drains. Also watch whether the Newmont team patches or abandons NemTokenV2, and whether PancakeSwap or data aggregators formally delist the pair under the NEM ticker, which would settle whether this becomes a contained $821,920 loss or a longer dispute over naming and liability.