SlowMist|Sep 30, 2026 05:31
🚨SlowMist TI Alert🚨
💸 MUS Loss: ~$36.9k
🔍 Root Cause: deposit() included the first-deposit bonus in both the immediate ETH refund and the user’s MUS allocation; withdraw() allowed same-transaction redemption without limiting total ETH returned to the amount deposited. Sixteen fresh addresses repeated the cycle to extract ETH from MUSystem.
📌 Attacker: 0x1a083ADf234a8f67ad65A9B9B616853ACf5998E5
📌 Victim: 0x9bdf81e6066d32764b7e75a1b5577237e06d9364
📌 Vulnerable Contract: 0x9bdf81e6066d32764b7e75a1b5577237e06d9364
Powered by http://SlowMist.AI
Tx:
https://etherscan.io/tx/0xfe28118e48c64b275b587c90da472fc13b8c3dbed9d3cded1e18c1e7a7fc0392
https://etherscan.io/tx/0xaa172fcaa4800b14826daed1a78c9d6dcd8f26ae45ce5f31786d55768b709ec6
https://etherscan.io/tx/0x905af4e8cdaf32c183605358c97181e9ad57393bd4ed1d945baf6d6eebe983fe
Share To
Timeline
HotFlash
APP
X
Telegram
CopyLink