Lien Finance was attacked, with losses of about $542k

robot
Abstract generation in progress

Deep Tide TechFlow message: On July 24, according to SlowMist monitoring, Lien Finance was attacked, with losses of about $542k. The root cause is that the exchangeEquivalentBonds function in the BondMakerCollateralizedEth contract lacks sufficient multi-set integrity checks; it only counts the total occurrences of anomalous bonds, without validating the actual occurrence of each bondID group by group.

The attacker obscured the missing anomalous bonds on the input side by repeatedly using the same anomalous bondID in the output group, thereby minting new non-anomalous bond tokens without destroying the corresponding input bonds. Afterwards, the attacker used three pre-authorized endpoints to exchange the related tokens for USDC, and ultimately transferred 542,144.628604 USDC out of the victim address.

USDC0.01%
View Original
This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.
  • Reward
  • Comment
  • Repost
  • Share
Comment
Add a comment
Add a comment
No comments
  • Pinned