🚨SlowMist TI Alert🚨 💸 @reddio_com Loss: ~9.25 ETH 🔍 Root Cause: The root cause is a cross-vault asset double-counting flaw: stETH deposited into the permissionlessly registered stETH vault is also included in the ETH vault’s `getTotalAssetBalance(ETH)`, so the same stETH simultaneously backs both rsvETH and rsvstETH. This lets an attacker use a flash loan to deposit stETH, inflate the rsvETH share price, redeem rsvETH for excess ETH, and then redeem rsvstETH to recover the same stETH, while the 2% withdrawal cap fails to prevent the manipulation. 📌 Attacker: `0x70f2333d21ed7e7d105f6578227a9a747687982c` 📌 Victim Diamond: `0x4315990d9eeaffdfafd49958b4851f203fa1126f` 📌 Vulnerable Vaults Implementation: `0x92ecc5deacb14937867686ca8b85dd8a65b74704` Powered by http://SlowMist.AI Tx: https://etherscan.io/tx/0xe3cba90e865c6cba950ebce36a52607f51f1fd33cd9fb920c78803f19b57791a(SlowMist)