Security firm Blockaid said Lumi Finance, a protocol on Arbitrum, appears to be under attack, with losses so far estimated at about $270,000. According to Blockaid, the issue stems from a side effect tied to token approvals during UserOp verification in Sodium smart accounts. The attacker was able to control the paymaster and spender, then obtain approval allowances from a large number of accounts before withdrawing funds. Blockaid added that the incident was still ongoing at the time of its update. The statement was posted on X and did not indicate that the attack had been contained.
Lumi Finance, a protocol on Arbitrum, appears to be under attack, according to Blockaid, which estimated losses at about $270,000 so far.
Blockaid said the incident appears to be linked to a side effect involving token approvals during UserOp verification in Sodium smart accounts. In its analysis, the attacker controlled the paymaster and spender, obtained approval allowances from a large number of accounts, and then withdrew funds.
Blockaid said the incident was still ongoing.
This article was originally published by Bit.Fan. For more cryptocurrency news and market insights, visit www.bit.fan. Disclaimer:
The market information, project data, and third-party content displayed on this platform are for industry information sharing only and do not constitute any form of investment advice or return commitment.
Cryptocurrency trading carries high risks. Users should fully assess their risk tolerance and make independent decisions. All profits, losses, and legal responsibilities are borne by the users themselves.
