GoPlus Security 🚦 (@GoPlusSecurity): 💣 4 contract exploits in 48 hours! AI + hackers have entered the “countdown-by-the-second” era. Can your contracts still hold up❓

💣 4 contract exploits in 48 hours! AI + hackers have entered the “countdown-by-the-second” era. Can your contracts still hold up❓ Over the past 48 hours, 4 smart contract attacks have occurred one after another on the #ETH mainnet, with total losses exceeding $1.5M! 1️⃣ Onchain aggregator contract exploited, nearly $1M lost Loss: $983K (384 yvWETH → 429 ETH) Root cause: Missing access control in the execute function + unlimited yvWETH approval from the victim Tx: https://etherscan.io/tx/0xebaaab69baa3cd2543eb80ecfb8e3ed226b9e5a6f5694891a8adf4edbcbd8107 2️⃣ Unauthorized third-party vault contract related to TradingProtocol exploited, nearly $400K lost Loss: $398K Root cause: Missing permission checks Tx: https://etherscan.io/tx/0x6b04344d5627df59d3bc645e7454f4605a90272852a91e435e370376643353b3 3️⃣ BCB contract exploited due to a reentrancy vulnerability Loss: $39.8K Root cause: The all-too-familiar reentrancy vulnerability Tx: https://etherscan.io/tx/0x879b365b169dbf79c7f6fc7c2f7fd57eb1e53f0be8cf97ed817a7ff3d2e0ba69 4️⃣ Arbitrary call vulnerability led to QNT asset losses Loss: $124.9K Root cause: EIP-7702 mechanism abuse + missing permission checks in BatchCall → arbitrary call vulnerability Tx: https://etherscan.io/tx/0x4f31f68df9f240492f13df9ab23207ea231ec1b5a89af9c31cde58e7d98cb18c With #AI entering the battlefield, hackers’ attacks are becoming more precise and faster than ever, compressing vulnerability discovery from “days” to “seconds.” In the face of rapidly evolving smart contract security offense and defense, perhaps the most effective security measure is: Fight magic with magic — AI vs AI ❗️ That is exactly why GoPlus Security launched #DeepScan, a next-generation AI-driven smart contract vulnerability discovery engine. Built for project teams, developers, and security teams, DeepScan provides AI-based continuous and normalized auditing, protecting contract security across the full lifecycle with higher efficiency and lower cost. 📢 Project teams, developers, and security teams — in this countdown-by-the-second security battle, have you started using #DeepScan yet? 👇 https://deepscan.gopluslabs.io