SlowMist: DIP token contract attacked, losses exceed 110,000 dollars; Code vulnerabilities could have been avoided with AI tools during auditing

Foresight News reported, according to monitoring by SlowMist, the DIP token contract has been attacked, resulting in a loss of approximately $110,000. The root cause of this attack lies in the lack of a return statement in the _transfer() function of the DIP token within the routing branch—when the from or to address of a transaction is the PancakeSwap router contract, the same transfer is executed twice, which leads to manipulation of related liquidity pool prices.

SlowMist founder Cosine pointed out that if developers had used AI tools to review the code during the audit phase, such vulnerabilities could have been avoided in advance. The contract used by the attacker has already been open-sourced and verified on BscScan and is available for public inspection.