The replay exploit took place on a third-party contract, enabling the attacker to make away with 200 ETHW tokens.