SlowMist (@SlowMist_Team) “🚨SlowMist TI Alert🚨 💸 Loss: 62.5 BNB & 1,195,918.92 JOE 🔍 Root Cause: Single” — TopicDigg
SlowMist
@SlowMist_Team
SlowMist is a Blockchain security firm established in 2018, providing services such as security audits, security consultants, red teaming, and more.
加入 April 2018
406 正在关注 88.7K 粉丝
🚨SlowMist TI Alert🚨
💸 Loss: 62.5 BNB & 1,195,918.92 JOE
🔍 Root Cause: Single-function reentrancy in `_removeLiquidityViaContract` – BNB sent via low-level `call` before updating `lpInfo[user].lpAmount`, allowing recursive calls.
📌 Attacker EOA: 0xaa761779945dcc5f26064fc6dcb36ffab6ac7610
📌 Attacker Contract: 0x31f81fcd91025728f24bd6f0e4efb156e345a4cf
📌 Vulnerable Proxy: 0xef0f12d08d66e76e1866e60f30a0daa578e00c04
📌 Vulnerable Implementation: 0xb12ce0a21f67a9fc3c8ad1c7dbc4b017b7e67319
Attackers exploited the delayed state write to repeatedly withdraw liquidity, netting 62.5 BNB and ~1.196M JOE via 25 reentrancy loops.
Powered by #SlowMist#.AI
显示更多
