GoPlus Security 🚦 (@GoPlusSecurity): 1/3
Estimated coin impact
Scores are not price-change percentages. High impact means a score of +70 or more, or -70 or less.
1/3 ⚠️Vulnerability Analysis: Breakdown of the Echo Protocol Exploit BTC liquidity aggregation protocol @EchoProtocol_ was exploited on #Monad through its eBTC Token contract. The attacker minted 1,000 #eBTC out of thin air, then used them as collateral on @Curvance to borrow assets, profiting approximately $863K. Attack vector: The attacker address obtained both the DEFAULT_ADMIN_ROLE and MINTER_ROLE permissions of the eBTC Token contract, removed the privileges of the original admin address, and then directly called the mint() function to mint 1,000 eBTC. https://monadscan.com/tx/0x2cc9730738c970b2c2ec1e1a27f38d69590db36fe069fb4ee04abaeb559357c0