CertiK flags $820K exploit draining NEM token’s PancakeSwap liquidity pool

NEM is a token with liquidity on PancakeSwap, the Binance Smart Chain-based decentralized exchange where token pairs are traded through pools rather than a traditional order book. A security alert from 0xCERT placed the incident in the USDT/NEM pool, and CertiK also identified the episode as a PancakeSwap liquidity exploit. The fact that both alerts focus on the pool rather than a broader platform outage points readers to a contract-level problem in how that market was functioning.

For users and builders around NEM, the immediate practical issue is that liquidity in the USDT/NEM pool was drained and the pool’s reserves were left altered. Anyone relying on that pair for swapping or price discovery would need to treat the market structure as compromised until the contract and pool are reviewed. DeFi projects that design tokenomics around automated liquidity now face the same basic question: whether the contract logic is robust enough to withstand manipulation.

The larger tension is between permissionless token markets and the risk that contract logic can be used against the pool itself. PancakeSwap is built for open access, but open access also means flaws in token contracts can become an on-chain route into shared liquidity. This case sits in the uncomfortable space where decentralized trading is still only as safe as the code behind each pair.

Still open is whether the sell-tracking logic identified in the alert is the full explanation for how the pool was drained and whether any recovery steps will follow. The record here does not say who was behind the exploit or whether funds were recovered. A contract review, a postmortem from the NEM team, or an updated alert from security firms would settle those points.