【Market Flash】You can withdraw money without having received it—an exploit in the FundsModule contract was used to drain around $41,000. SlowMist noted that its trusted release logic did not verify whether ETH or USDC had actually arrived, allowing attackers to exploit the flaw. The amount was not large, but the underlying issue is a classic one: in DeFi, the biggest danger isn’t hackers being too skilled—it’s a project’s own verification process being little more than window dressing. Do you think this kind of vulnerability is an isolated case, or a common problem across more protocols?
$ETH $USDC $BTC
#DeFi安全 #智能合约 #SlowMist
(Source: Coinfomania/SlowMist)
⚠️Risk warning: The above is shared for market information purposes only and does not constitute investment advice. Investing involves risks; please exercise caution when entering the market.