๐จSlowMist TI Alert๐จ
๐ธ MUS Loss: ~$36.9k
๐ Root Cause: deposit() included the first-deposit bonus in both the immediate ETH refund and the userโs MUS allocation; withdraw() allowed same-transaction redemption without limiting total ETH returned to the amount deposited. Sixteen fresh addresses repeated the cycle to extract ETH from MUSystem.
๐ Attacker: 0x1a083ADf234a8f67ad65A9B9B616853ACf5998E5
๐ Victim: 0x9bdf81e6066d32764b7e75a1b5577237e06d9364
๐ Vulnerable Contract: 0x9bdf81e6066d32764b7e75a1b5577237e06d9364
Powered by
Tx: