SlowMist|May 11, 2026 10:42
🚨SlowMist TI Alert🚨
💸 Loss: 140,180 USDT (140,180,175,562 tokens)
🔍 Root Cause: Missing access control in addUsers (0x4777ff62) function of PayrollDistribution. Anyone can register users for existing drop and set arbitrary totalAmount.
📌 Attacker: 0x90b147592191388e955401af43842e19faa87ee2
📌 Victim: 0xa184af4b1c01815a4b57422a3419e4fb78a96ee4
📌 Vulnerable Contract: 0xef2c77f3b9b8aaa067239bc6b4588bae26433494
Attacker registered exploit contract via addUsers in constructor, flash loaned USDT deposit, claimed oversized payroll from drop #3.
Powered by #SlowMist.AI
https://polygonscan.com/tx/0x619296d6f9ba99120a534f4eb93f3db291dabbbb22b1ba170d2a023078422b67
https://polygonscan.com/tx/0xb469a24ec737be16fe41367a7b5b315c7f03b4e0ff3af50b3a2db03b3066b982(SlowMist)
Share To
Timeline
HotFlash
APP
X
Telegram
CopyLink