注册并分享邀请链接,可获得视频播放与邀请奖励。

SlowMist (@SlowMist_Team) “🚨SlowMist TI Alert🚨 AIDC token on BSC has been exploited. 💸 Loss: 220.12 WBNB” — TopicDigg

SlowMist 的个人资料封面
SlowMist 的头像
SlowMist
@SlowMist_Team
SlowMist is a Blockchain security firm established in 2018, providing services such as security audits, security consultants, red teaming, and more.
加入 April 2018
406 正在关注    88.7K 粉丝
🚨SlowMist TI Alert🚨 AIDC token on BSC has been exploited. 💸 Loss: 220.12 WBNB (~$120929.35) 🔍 Root Cause: AIDCToken's `_sellTransfer()` accumulates a 30% burn amount without deducting it from the seller. Subsequently, any non-Pair transfer triggers `_executeAccumulatedBurn()`, which incorrectly burns tokens from the `uniswapPair` balance instead of the seller. After burning, `sync()` is called, artificially deflating the AIDC reserve in the AMM, allowing the attacker to drain WBNB. 📌 Attacker: 0x89eb2c99e970d831525c7a52badc290afa116b63 📌 Victim: 0x2725033282b3bd4be8873b7f0f622c18e3b7cbd8 (Pancake V2 AIDC/WBNB Pair) 📌 Vulnerable Contract: 0x5021d71859f81b4c905b573591db8f9cc4a0c6fe (AIDCToken) The attacker exploited a flawed burn mechanism where sell-induced burn debt is wrongly imposed on the liquidity pool, enabling repeated reserve manipulation and a final swap that drained nearly all WBNB from the Pair. Powered by #SlowMist#.AI
显示更多