🚨SlowMist TI Alert🚨
💸 MUS Loss: ~$36.9k
🔍 Root Cause: deposit() included the first-deposit bonus in both the immediate ETH refund and the user’s MUS allocation; withdraw() allowed same-transaction redemption without limiting total ETH returned to the amount deposited. Sixteen fresh addresses repeated the cycle to extract ETH from MUSystem.
📌 Attacker: 0x1a083ADf234a8f67ad65A9B9B616853ACf5998E5
📌 Victim: 0x9bdf81e6066d32764b7e75a1b5577237e06d9364
📌 Vulnerable Contract: 0x9bdf81e6066d32764b7e75a1b5577237e06d9364
Powered by
Tx: