SlowMist
@SlowMist_Team
SlowMist is a Blockchain security firm established in 2018, providing services such as security audits, security consultants, red teaming, and more.
๊ฐ์
April 2018
412 ํ๋ก์ ์ค 91.4K ํฌ
๐จSlowMist TI Alert๐จ
๐ธ Loss: 140,180 USDT (140,180,175,562 tokens)
๐ Root Cause: Missing access control in addUsers (0x4777ff62) function of PayrollDistribution. Anyone can register users for existing drop and set arbitrary totalAmount.
๐ Attacker: 0x90b147592191388e955401af43842e19faa87ee2
๐ Victim: 0xa184af4b1c01815a4b57422a3419e4fb78a96ee4
๐ Vulnerable Contract: 0xef2c77f3b9b8aaa067239bc6b4588bae26433494
Attacker registered exploit contract via addUsers in constructor, flash loaned USDT deposit, claimed oversized payroll from drop #3#.
Powered by #SlowMist#.AI
๋ ๋ณด๊ธฐ
