SlowMist|9月 08, 2026 07:17
🚨SlowMist TI Alert🚨
💸 WealthManagementV2 Loss: 26,414 USDT
🔍 Root Cause: The owner privileges of the victimized contract were suspected of being illegally transferred (possibly due to a leaked private key). The new owner (attacker-controlled) can instantly set plan parameters (`period=0`, `interestMultiplier`/`unlockMultiplier=528,300,000`) via `updatePlanConfig` without timelock or bounds. This allows minting inflated interest by investing and redeeming in the same tx, then unlocking and withdrawing it via a second investment.
📌 Attacker: EOA `0xe439422afdd247503f75b4143c4a973eced04a36`
📌 Victim Contract: WealthManagementV2 `0x7b5dda5135811ec0870a75a04d0e1807edc3c93d`
Transaction:
https://bscscan.com/tx/0x117d672359c3eaa81167a68613c0c7a85ea9127014d1f3e3cd6a6f0fe6a592fe
https://bscscan.com/tx/0x66822644d63004ad6b06f64408518ba3ec567bf864f733cb982d3d8b9fe8c0d2
Powered by http://SlowMist.AI(SlowMist)
Share To
Timeline
HotFlash
APP
X
Telegram
CopyLink