According to CoinWorld, SlowMist security team issued an alert stating that Littleboyplus suffered a vulnerability attack, resulting in a loss of approximately 377,642 USDT, equivalent to about 610.555 BNB. SlowMist stated that the vulnerability stems from the fact that the update function of the lbphashrate contract can be triggered by a zero-amount transferfrom call, bypassing OpenZeppelin's authorization checks. Attackers could directly mint LBP tokens into the PancakePair address without trading pair authorization, causing an imbalance between the balance and reserves, and then withdrawing USDT through PancakePair.swap.