The attacker repeated an exploit loop 42 times by sending NEM tokens to the pool, calling skim() to extract excess tokens, and triggering flushLpSellRecycle().