Two unknown contracts on Ethereum were attacked, resulting in a loss of approximately $120,000, suspected to be due to access control vulnerabilities

ChainCatcher news, according to BlockSec Phalcon, their system detected multiple suspicious transactions targeting two unknown contracts on Ethereum, resulting in a loss of approximately $120,000. The attacker exploited the lack of access control in the key functions approveERC20 and withdrawAll of the victim contracts, successfully extracting tokens from within the contracts. These victim contracts are not open source and were deployed by the same address.