Internet Token LiquidityUnifier Role Manipulation Exploit

Pre-attack staging began on August 14, 2026 with deployment of an automation contract and a bridge deposit. On September 21, 2026 at 13:31:45 UTC, the attacker exercised Grant/Revoke Role calls on the RoleStore contract governing LiquidityUnifier to gain unauthorized burn privileges. From 13:39:41 UTC onward, the attacker repeatedly burned a portion of the INT token's AMM reserve to artificially inflate its price, then swapped small amounts of WETH for inflated-value INT via KyberSwap and Alien Base V3 — netting roughly $16,952 in profit across two verified swaps. The exploit concluded at 07:29:13 UTC on September 22, 2026 with a final 125,000,000 INT burn.