MistTrack🕵️(@MistTrack_io):🚨 MistTrack Fund Tracking 🚨 Following the @likwid_fi incident reported by @SlowMist_Team, we tracked the on-chain movement of the stolen funds. 💸 Loss: 74.31 $BNB 📌 Attacker: 0x90bde1e0bb16b3deeb9d638acf8d01f19fd2f31e 🧭 Fund Flow: Attacker → Tornado Cash 🧩 Key Findings: • Multiple withdrawals by the attacker were traced to Tornado Cash, which also provided the initial funding. • 31.8 $BNB was transferred to the attacker from FixedFloat. 🔎 MistTrack has added the related addresses to its malicious address library.

2026.09.18 03:55

🚨 MistTrack Fund Tracking 🚨 Following the @likwid_fi incident reported by @SlowMist_Team, we tracked the on-chain movement of the stolen funds. 💸 Loss: 74.31 $BNB 📌 Attacker: 0x90bde1e0bb16b3deeb9d638acf8d01f19fd2f31e 🧭 Fund Flow: Attacker → Tornado Cash 🧩 Key Findings: • Multiple withdrawals by the attacker were traced to Tornado Cash, which also provided the initial funding. • 31.8 $BNB was transferred to the attacker from FixedFloat. 🔎 MistTrack has added the related addresses to its malicious address library.

SlowMist@SlowMist_Team

2026.09.18 03:13

🚨SlowMist TI Alert🚨 💸 @likwid_fi Loss: 74.31 BNB 🔍 Root Cause: LikwidMarginPosition._executeAddCollateralAndBorrow (leverage=0 branch) never assigns delta.pairDelta, so the borrow path leaves pairReserves untouched. getAmountOut(pairReserves,...) returns the same 4.7857 BNB quote on every call — the attacker repeated the margin/borrow cycle 14 times, settling 211.8M TOKEN at the first-trade marginal price with no AMM price impact. 📌 Attacker EOA: 0x90bde1e0bb16b3deeb9d638acf8d01f19fd2f31e 📌 Attack Contract: 0xc63fb27f52ed8d06673c60c3075b2d3bd26cf4aa 📌 Vulnerable Contract: 0x6bec0c1dc4898484b7f094566ddf8bc82ed7abe8 (LikwidMarginPosition) 📌 Victim Contract: 0x065d449ec9d139740343990b7e1cf05fa830e4ba (LikwidVault) Powered by Tx: