SlowMist
SlowMist|Oct 09, 2026 03:35
🚨SlowMist TI Alert🚨 💸 @BitBayofficial Loss: ~$14K 🔍 Root Cause: The Vault's `_withdraw()` function transfers its entire token balance when `liquidity == 0`, without limiting the payout to the user's proportional share. The attacker exploited this flaw by triggering a zero-liquidity state via `reposition()`, then redeeming just 1 minimal share unit to drain approximately 14,838.47 DAI. 📌 Attacker: 0x59Ae3c8dd50063429D86BdaEBbC350fB64e9884B 📌 Victim: 0x048E88311ca84876aeA086125825492e2AF2e5A0 📌 Vulnerable Contract: 0x048E88311ca84876aeA086125825492e2AF2e5A0 Powered by http://SlowMist.AI Tx: https://polygonscan.com/tx/0x5b795dc5c5e1665b712c7ccf478c1d8c59a162d698f4e0bfb40bd303e04a7ff2
+3
Mentioned
Share To

Timeline

HotFlash

APP

X

Telegram

Facebook

Reddit

CopyLink

Hot Reads