๐จSlowMist TI Alert๐จ
๐ธ WealthManagementV2 Loss: 26,414 USDT
๐ Root Cause: The owner privileges of the victimized contract were suspected of being illegally transferred (possibly due to a leaked private key). The new owner (attacker-controlled) can instantly set plan parameters (`period=0`, `interestMultiplier`/`unlockMultiplier=528,300,000`) via `updatePlanConfig` without timelock or bounds. This allows minting inflated interest by investing and redeeming in the same tx, then unlocking and withdrawing it via a second investment.
๐ Attacker: EOA `0xe439422afdd247503f75b4143c4a973eced04a36`
๐ Victim Contract: WealthManagementV2 `0x7b5dda5135811ec0870a75a04d0e1807edc3c93d`
Transaction:
Powered by