MT Token — Buy Restriction Bypass / Logic Error

The MT Token contract contained a buy restriction mechanism designed to limit purchases. However, the router and pair addresses were incorrectly whitelisted, allowing the attacker to bypass the restriction logic entirely. The attacker swapped tokens and removed liquidity via the router, exploiting the flawed access control to extract approximately $242,000.