🚨SlowMist TI Alert🚨
💸 Loss: 140,180 USDT (140,180,175,562 tokens)
🔍 Root Cause: Missing access control in addUsers (0x4777ff62) function of PayrollDistribution. Anyone can register users for existing drop and set arbitrary totalAmount.
📌 Attacker: 0x90b147592191388e955401af43842e19faa87ee2
📌 Victim: 0xa184af4b1c01815a4b57422a3419e4fb78a96ee4
📌 Vulnerable Contract: 0xef2c77f3b9b8aaa067239bc6b4588bae26433494
Attacker registered exploit contract via addUsers in constructor, flash loaned USDT deposit, claimed oversized payroll from drop #
3#.
Powered by #
SlowMist#.AI