GoPlus: The x402 cross-chain protocol @402bridge is suspected to be hacked, reminding users not to over-authorize.

PANews reported on October 28 that the GoPlus Chinese community issued a security alert, indicating that the x402 cross-chain protocol @402bridge is suspected to have been hacked. The Creator of the contract starting with 0xed1A transferred the Owner to the Address 0x2b8F. The new Owner then called the transferUserToken method in the contract to transfer all remaining USDC from the wallets of all authorized users. Users must authorize USDC to the @402bridge contract before Minting, resulting in over two hundred users losing their remaining USDC due to excessive authorization. The Address 0x2b8F transferred a total of 17693 USDC from users, and then exchanged the USDC for ETH, which was subsequently cross-chained multiple times to Arbitrum. It is recommended that users who have participated in this project cancel the relevant authorizations as soon as possible; remind users to check whether the authorized address is the official address of the interactive project before authorizing, only authorize the required amount, and do not authorize indefinitely; and regularly check authorizations and cancel unnecessary authorizations.