🚨SlowMist TI Alert🚨 💸 @X7_Finance Loss: ~6.78 ETH 🔍 Root Cause: In `claimRewards()`, `totalRewards` is incremented by `(address(this).balance - lastETHBalance)` on every call, but `lastETHBalance` is only updated when `claimable > 0`. Calling with an empty array leaves `claimable` at 0, so the same unaccounted balance is repeatedly added to `totalRewards`, inflating the per-token reward. The attacker also donated ETH to amplify the delta before draining funds. 📌 Attacker: 0xc79352119a7cf6efbfabbd7e6b013b79687bacf2 📌 Victim: 0x70000299ee8910ccacd97b1bb560e34f49c9e4f7 📌 Vulnerable Contract: 0x70000299ee8910ccacd97b1bb560e34f49c9e4f7 (X7Pioneer) Powered by http://SlowMist.AI Tx: https://etherscan.io/tx/0xc98056d6ab55ef898189da5fa1fb08b968cb84ca99528d171f8240836b21766d