SlowMist(@SlowMist_Team):🚨SlowMist TI Alert🚨 💸 Dream Health Chain Loss: ~$71.8k 🔍 Root Cause: Business award state machine logic flaw. `createAward()` records a fixed reward without locking any collateral or per-award reserve; `participateAward()` does not require the award to be unclaimed, so a claimed award (`status=2`) can be reset to `status=1`; `claimAward()` then pays the same fixed reward repeatedly from the shared proxy balance. Triggering a reset costs as little as 0–1 wei transfer. 📌 Attacker: 0xd3a8d0a9f55cf679fff6f277e49afc95b49d2b07 📌 Victim Proxy: 0xe2a047aadbac51b0116af1ce91ebdae4b4202094 📌 Vulnerable Implementation: 0x5abb3fe2a02e5d4320862944cd3a0b8f6af28ce1 📌 Exploit Contract: 0x226923d34a10f3d54b57b9f4b685e82c6cba968a Powered by https://t.co/Mz5jOnx997 Tx:

2026.09.05 08:24

🚨SlowMist TI Alert🚨 💸 Dream Health Chain Loss: ~$71.8k 🔍 Root Cause: Business award state machine logic flaw. `createAward()` records a fixed reward without locking any collateral or per-award reserve; `participateAward()` does not require the award to be unclaimed, so a claimed award (`status=2`) can be reset to `status=1`; `claimAward()` then pays the same fixed reward repeatedly from the shared proxy balance. Triggering a reset costs as little as 0–1 wei transfer. 📌 Attacker: 0xd3a8d0a9f55cf679fff6f277e49afc95b49d2b07 📌 Victim Proxy: 0xe2a047aadbac51b0116af1ce91ebdae4b4202094 📌 Vulnerable Implementation: 0x5abb3fe2a02e5d4320862944cd3a0b8f6af28ce1 📌 Exploit Contract: 0x226923d34a10f3d54b57b9f4b685e82c6cba968a Powered by Tx: