Phalcon: SHIBA’s ICO project on BSC was attacked due to improper locking mechanism

Phalcon posted on X platform stating that the SHIBA ICO project on BSC was attacked due to improper locking mechanism. The attacker used 20 BNB to purchase 507.7 million locked SHIBA. However, the locked SHIBA can be transferred to PancakePair using the batchTransferLockToken function, which allows the attacker to bypass the designated lock-up period. In this case, the attacker can immediately exchange BNB from PancakePair and profit 101.7 BNB.