SlowMist
@SlowMist_Team
SlowMist is a Blockchain security firm established in 2018, providing services such as security audits, security consultants, red teaming, and more.
Joined April 2018
405 Following 88.5K Followers
๐จSlowMist TI Alert๐จ
๐ธ Loss: 140,180 USDT (140,180,175,562 tokens)
๐ Root Cause: Missing access control in addUsers (0x4777ff62) function of PayrollDistribution. Anyone can register users for existing drop and set arbitrary totalAmount.
๐ Attacker: 0x90b147592191388e955401af43842e19faa87ee2
๐ Victim: 0xa184af4b1c01815a4b57422a3419e4fb78a96ee4
๐ Vulnerable Contract: 0xef2c77f3b9b8aaa067239bc6b4588bae26433494
Attacker registered exploit contract via addUsers in constructor, flash loaned USDT deposit, claimed oversized payroll from drop #3#.
Powered by #SlowMist#.AI
Show more
