PeckShield Inc. (@peckshield): We have analyzed the latest @FEGtoken hack and the root cause appears to be a composability issue from the integration with the underlying Wormhole br…
Estimated coin impact
Scores are not price-change percentages. High impact means a score of +70 or more, or -70 or less.
We have analyzed the latest @FEGtoken hack and the root cause appears to be a composability issue from the integration with the underlying Wormhole bridge for cross-chain message/token transfers. In particular, the hacker creates a fake deposit message (via an unanticipated Wormhole relayer interface -- not supported in audited FEG SmartBridge), which was then delivered to another chain and received by FEG SmartBridge (now disabled) for FEG token withdrawal. Note the SmartDeFi code was not affected in any way. Here are hack-related example transactions that triggered the fake deposit. bscscan.com/tx/0x001d8ec72… etherscan.io/tx/0xaac5c0465…