注册并分享邀请链接,可获得视频播放与邀请奖励。

SlowMist
@SlowMist_Team
SlowMist is a Blockchain security firm established in 2018, providing services such as security audits, security consultants, red teaming, and more.
加入 April 2018
412 正在关注    91.4K 粉丝
🚨SlowMist TI Alert🚨 💸 $NEM Loss: ~$821,920 🔍 Root Cause: NemTokenV2 credited transfers into the LP pair as sell volume without verifying swap settlement. These credits remained valid after the transferred tokens were removed via skim(), allowing flushLpSellRecycle() to burn pre-existing LP reserves. The attacker repeated transfer→skim→flush 42 times, reducing the pair’s NEM balance and syncing the lower reserves, then sold the remaining NEM at the inflated price to extract USDT. 📌 Attacker: 0xfd929b0f270dfea6c4827262b4e2bf6ea50fe9b6 📌 Attack Contract: 0x5e6d1f40be466dd2facc94a26818948ecd3b1ca2 📌 Vulnerable Contract: 0x9cf0e3ad4efa7ab602d7b5a38c55795cfa777777 (NemTokenV2) 📌 Victim Pair: 0x840e19dcca541ee0b55a3c67e900a39d523b12b8 (PancakePair USDT/NEM) Powered by Tx:
显示更多