GoPlus Security 🚦 (@GoPlusSecurity): 🚨 GoPlus Security Alert:

🚨 GoPlus Security Alert: Ekubo Protocol Exploited — Revoke Approvals to the Related Risk Contracts Immediately! The open-source AMM trading protocol @EkuboProtocol had its contract on #ETH exploited, resulting in a loss of 17 WBTC, worth approximately $1.4 million. Please immediately revoke token approvals to the following contract: 0x8CCB1ffD5C2aa6Bd926473425Dea4c8c15DE60fd Attack Mechanism: Based on the attack flow, the forward() function call failed but did not revert; the payCallback() callback function of pay() can transfer away tokens that other accounts had approved to the exploited contract 0x8ccb1ffd. Therefore, users who have approved tokens to contract 0x8ccb1ffd are directly exposed to risk. Please revoke your token approvals immediately. Attacker address: 0xA911Ff351B143634Dbc5aF3E204EA074583A83e3 Attack contract address: 0x61b0dAD9628D3e644eB560a5c9B0F960430E3A75 Exploited contract addresses: 0x8CCB1ffD5C2aa6Bd926473425Dea4c8c15DE60fd 0xe0e0e08A6A4b9Dc7bD67BCB7aadE5cF48157d444 Attack transaction: https://etherscan.io/tx/0x770bc9a1f7c32cb63a5002b9ceb5c7994cd3af0fc6b2309cb32d3c46f629daa0