PeckShield Inc. (@peckshield): A victim just lost a Alchemix Yearn yvVault position $yvWETH (estimated $~1m), from an earlier approval to an unverified contract (https://etherscan.i…
Estimated coin impact
Scores are not price-change percentages. High impact means a score of +70 or more, or -70 or less.
A victim just lost a Alchemix Yearn yvVault position $yvWETH (estimated $~1m), from an earlier approval to an unverified contract (https://etherscan.io/address/0x143a737bffc6414b61134f513ceed1a64390181a). This unverified contract, created 10 days ago, turns out to be buggy and can be exploited for arbitrary call execution. Here is the vulnerable logic from the decompiled contract, affected in the following exploit tx: https://etherscan.io/tx/0xebaaab69baa3cd2543eb80ecfb8e3ed226b9e5a6f5694891a8adf4edbcbd8107