Attacker drains $1.4 million from CUT token pools via mysterious unverified contract

An account used an unreadable function to remove 1.4 million BSC-USD without needing to burn the equivalent LP tokens.