Slow Mist: A certain unverified contract has a low-level call vulnerability, resulting in the theft of 16.6 WETH

The Slow Mist security team issued an alert that an unverified contract exposed an unrestricted low-level call vulnerability due to selector 0x42be3129, lacking access control and target data validation, resulting in approximately 16.6 WETH being stolen.

The attacker exploited the existing ERC20 allowance of the contract to bypass the owner check and execute unauthorized transferFrom operations.