Wu Blockchain (@WuBlockchain): The Dilation Effect points out that the Bybit attacker executes the transfer function of a malicious contract through delegatecall. The transfer code…

The Dilation Effect points out that the Bybit attacker executes the transfer function of a malicious contract through delegatecall. The transfer code modifies the value of slot 0 using the SSTORE instruction, thus changing the implementation address of the multi-signature contract of Bybit's cold wallet into the attacker's address. As long as the person/device that initiates this multi-signature transaction is taken care of, the subsequent several reviewers will be much less vigilant when they see this transfer. Because an ordinary person would think that a transfer is just a fund transfer when they see it, who would have known that it is actually a contract modification. x.com/dilationeffect…