SlowMist
@SlowMist_Team
SlowMist is a Blockchain security firm established in 2018, providing services such as security audits, security consultants, red teaming, and more.
加入 April 2018
410 正在關注 90.5K 粉絲
🚨SlowMist TI Alert🚨
💸 WealthManagementV2 Loss: 26,414 USDT
🔍 Root Cause: The owner privileges of the victimized contract were suspected of being illegally transferred (possibly due to a leaked private key). The new owner (attacker-controlled) can instantly set plan parameters (`period=0`, `interestMultiplier`/`unlockMultiplier=528,300,000`) via `updatePlanConfig` without timelock or bounds. This allows minting inflated interest by investing and redeeming in the same tx, then unlocking and withdrawing it via a second investment.
📌 Attacker: EOA `0xe439422afdd247503f75b4143c4a973eced04a36`
📌 Victim Contract: WealthManagementV2 `0x7b5dda5135811ec0870a75a04d0e1807edc3c93d`
Transaction:
Powered by
顯示更多
