According to Paidun's analysis, the attacked code of LeetSwap is the function "LeetSwapV2Pair::_transferFeesSupportingTaxTokens()" forked from Solidly.