SlowMist (@SlowMist_Team) “🚨 SlowMist TI Alert 🚨 After receiving user reports of stolen funds, we looked” — TopicDigg
SlowMist
@SlowMist_Team
加入 April 2018
0 正在关注 0 粉丝
🚨 SlowMist TI Alert 🚨
After receiving user reports of stolen funds, we looked into @PennysiaLabs. The Settlement contract on Ethereum was exploited through an arbitrary external call, which let the attacker spend users’ leftover token approvals. 🔧
⚠️ Anyone who ever approved tokens to the Settlement contract should revoke now 👇
0x3aad97e5a91b8e43b7dc830aceb004307678795e
Attacker: 0x813a5ab666adeba907548235fbac087642878300
Attack tx:
显示更多
