SlowMist Cosine Questions the LABUBU “Theft” Incident on BNB Chain: Key Parameters Appear to Have Been Abnormally Modified

Svmuu News: Yu Xian, founder of SlowMist, published an analysis stating that the incident involving the loss of approximately $1.1 million from the OLPC/LABUBU liquidity pool on the BNB Chain was suspicious. The theft was caused by a severe imbalance in the OLPC/LABUBU trading pair, which resulted from an “exploitable vulnerability” in OLPC being exploited;_update allows for the burning of a quantity of OLPC equal to value * decimalsValue when certain conditions are met. Normally, decimalsValue is set to 1, but approximately 46 days before the attack, the owner changed it to an extremely large value of 7326680472586200649,A few days later, the OLPC owner relinquished their ownership rights, turning the address into a zero-balance address. Today, the attacker exploited this extremely large decimalsValue to trigger a Pair reserve burn, allowing them to exchange a small amount of OLPC for a large amount of LABUBU.The attacker ultimately exchanged 1.115 million USDT at low cost. The suspicious aspect lies in the setting of `decimalsValue`—why would the OLPC owner set it to such an astronomical value?