đš EXPLOIT ALERT: $30K DRAINED via Signature Replay
@atomic__green just lost 29,984 $USDC in a textbook signature replay attack.
How it went down:
âą Attacker exploited missing nonce/chainID/deadline checks in signed digest (0xa806010f)
âą Replayed ONE manager signature across 21 different LP position IDs
âą Burned full LP positions via partialBurn under flashloan-manipulated prices
âą Zero TWAP or slippage protection = easy $ARBâ$USDC arb
Attacker: 0xf880...c7e
Victim Position Manager: 0xf617...69d9
Vulnerable Contract: 0x51ff...42a8
This is why you ALWAYS bind position ID + nonce + chainID in your signature schema. One sig = 21 exploits.
Stay sharp. Audit your LP managers.
đ SlowMist TI
@atomic__green just lost 29,984 $USDC in a textbook signature replay attack.
How it went down:
âą Attacker exploited missing nonce/chainID/deadline checks in signed digest (0xa806010f)
âą Replayed ONE manager signature across 21 different LP position IDs
âą Burned full LP positions via partialBurn under flashloan-manipulated prices
âą Zero TWAP or slippage protection = easy $ARBâ$USDC arb
Attacker: 0xf880...c7e
Victim Position Manager: 0xf617...69d9
Vulnerable Contract: 0x51ff...42a8
This is why you ALWAYS bind position ID + nonce + chainID in your signature schema. One sig = 21 exploits.
Stay sharp. Audit your LP managers.
đ SlowMist TI