SlowMist (@SlowMist_Team) “🚨SlowMist TI Alert🚨 💸 Loss: 140,180 USDT (140,180,175,562 tokens) 🔍 Root Cau” — TopicDigg
SlowMist
@SlowMist_Team
SlowMist is a Blockchain security firm established in 2018, providing services such as security audits, security consultants, red teaming, and more.
加入 April 2018
405 正在关注 88.5K 粉丝
🚨SlowMist TI Alert🚨
💸 Loss: 140,180 USDT (140,180,175,562 tokens)
🔍 Root Cause: Missing access control in addUsers (0x4777ff62) function of PayrollDistribution. Anyone can register users for existing drop and set arbitrary totalAmount.
📌 Attacker: 0x90b147592191388e955401af43842e19faa87ee2
📌 Victim: 0xa184af4b1c01815a4b57422a3419e4fb78a96ee4
📌 Vulnerable Contract: 0xef2c77f3b9b8aaa067239bc6b4588bae26433494
Attacker registered exploit contract via addUsers in constructor, flash loaned USDT deposit, claimed oversized payroll from drop #3#.
Powered by #SlowMist#.AI
显示更多
