CUT Token Incident Analysis

On 10 September 2024, Caterpillar Coin ($CUT) was exploited via a flashloan attack that manipulated a token ‘price protection’ mechanism and liquidity pool bookkeeping to extract about $1.4M and cause ~99% slippage. The report outlines the attack flow (flashloan, swaps, add/remove liquidity loops), vulnerable contract methods and external order/reward logic abused, provides transaction hashes and attacker/contract addresses, and quantifies the repeated pattern used to realize profit.