WXETA token exploit

Awful “initialize” function. It didn’t set “initialized” to true, anyone can call “initialize” function. Hacker called “initialize” and then minted WXETA tokens to pair, and then drained USDT, gained $65k.