SlowMist’s security team issued an alert over an exploit tied to an unverified smart contract, saying a selector identified as 0x42be3129 exposed an unrestricted low-level call vulnerability. According to the alert, the contract lacked both access control and validation of target data, a combination that allowed the attack to go through. SlowMist said the incident resulted in the loss of about 16.6 WETH.
The firm added that the attacker took advantage of existing ERC20 token allowances associated with the contract. By using those pre-existing approvals, the attacker was able to bypass owner checks and carry out unauthorized transferFrom operations. The warning, first carried by ChainCatcher, focused on the technical cause of the exploit and the mechanism used to move the funds rather than disclosing additional project details.
ChainCatcher reported that SlowMist’s security team has issued an alert over an exploit involving an unverified contract. The firm said selector 0x42be3129 exposed an unrestricted low-level call vulnerability, and that missing access control and a lack of target data validation led to the theft of about 16.6 WETH.
According to SlowMist, the attacker used existing ERC20 allowances tied to the contract to bypass owner checks and execute unauthorized transferFrom operations.
This article was originally published by Bit.Fan. For more cryptocurrency news and market insights, visit www.bit.fan. Disclaimer:
The market information, project data, and third-party content displayed on this platform are for industry information sharing only and do not constitute any form of investment advice or return commitment.
Cryptocurrency trading carries high risks. Users should fully assess their risk tolerance and make independent decisions. All profits, losses, and legal responsibilities are borne by the users themselves.
