CertiK: Swap-LP contract attacked, resulting in a loss of approximately 1.1 million dollars
ChainCatcher news, according to CertiK monitoring, the Swap-LP contract on BNB Chain (0xe0c3...f28f) was attacked, resulting in a loss of approximately $1.1 million. The attacker (0xdead) transferred the stolen funds to Tornado Cash.Specifically, the attacker manipulated a low-level call in the Swap-LP factory address, triggering the function 0x33604058 of the SwapLP pair. This resulted in all WDZD tokens in that pair being transferred to the factory address. Consequently, the attacker was able to obtain more SWAP LP using fewer WDZD from the unverified address 0x3c4e06d17e243e2cb2e4568249b6f7213c43c743, and then burned the LP for profit. (Source link)
