LienFinance was attacked due to a code vulnerability, with losses of $542k

PANews July 24, according to SlowMist monitoring, Lien Finance suffered an attack that resulted in losses of about $542k due to missing multi-set completeness checks in the exchangeEquivalentBonds function in the BondMakerCollateralizedEth contract. The attacker drained abnormal counts by repeatedly reusing a single exception bondID, hiding missing input anomalies, and minted new non-exception BondTokens without destroying the corresponding input bonds, then sold them for USDC, stealing funds from the victim’s pre-authorized addresses.