"[SlowMist Founder Yu Jian: Ekubo Contract Exploited, User Lost 17 WBTC] Odaily Planet Daily reports that SlowMist founder Yu Jian posted on the X platform, stating, 'The Ekubo-related contract has been maliciously exploited. The issue arises when users previously authorized the relevant token to: 0x8CCB1ffD5C2aa6Bd926473425Dea4c8c15DE60fd; for example, this user 0x765DEC had an unlimited authorization for WBTC (158 days ago): the attacker could designate the authorized user as the payer, and in the payCallback function, the contract would call WBTC transferFrom(victim, Ekubo Core, amount). Then, through Ekubo Core (0xe0e0e08A6A4b9Dc7bD67BCB7aadE5cF48157d444)'s withdraw/pay settlement process, the assets were transferred to the attacker. This operation was executed 85 times, each time transferring 0.2 WBTC, resulting in user 0x765DEC losing a total of 17 WBTC. Users are advised to promptly install the official reminder and check the following contract authorizations: 0x8ccb1ffd5c2aa6bd926473425dea4c8c15de60fd (V2) 0x4f168f17923435c999f5c8565acab52c2218edf2 (V3) Arbitrum: 0xc93c4ad185ca48d66fefe80f906a67ef859fc47d (V3).'