登録して招待リンクを共有すると、動画再生報酬と紹介報酬を獲得できます。

SlowMist
@SlowMist_Team
SlowMist is a Blockchain security firm established in 2018, providing services such as security audits, security consultants, red teaming, and more.
参加 April 2018
408 フォロー中    88.8K ファン
🚨SlowMist TI Alert🚨 $DTXT/USDT Pair on BSC Drained Due to Spoofable Liquidity-Addition Detection Logic Root cause: DTXT determines whether an action is liquidity addition, liquidity removal, or a sell by comparing the difference between USDT.balanceOf(pair) and the Pair’s reserves. The attacker was able to transfer a tiny amount of USDT directly to the Pair, causing a large DTXT sell to be misclassified as liquidity addition, thereby bypassing the sell fee / swapFee logic. Primitive: Flash-loan-assisted liquidity addition/removal + 1 wei USDT Pair balance spoofing + direct Pair.swap to drain USDT. Profit: Approximately 35,041.106 USDT, after repaying a 1,077,366.001021 USDT flash loan from Moolah. Related wallet addresses: Attacker EOA: 0xd304ea1592f733e0a46436a01fe54bd504009526 Attack contract: 0x3065bc8ed8bd53bdc3fd4633c3097c40726b5f5f Helper: 0xd2453ff82e1c5b568ddb260f1f0bb95169895428 DTXT: 0xac9bf7c320d4ce2d0ac978b83955dd67351897d2 DTXT/USDT Pair: 0x90bfc1dbc878ba54858ba8a635b3daebd2ac6c01 Tx:
もっと見る