Evil jars deployed during the attack and passed in the swapExactJarForJar, investigating more on this
etherscan.io/address/0x75aa…
etherscan.io/address/0x02c8…
The are sensible ops executed in that method (e.g. approve, withdraw etc).
etherscan.io/address/0x75aa…
etherscan.io/address/0x02c8…
The are sensible ops executed in that method (e.g. approve, withdraw etc).
In addition in the second invocation for swapExactJarForJar there were passed a target and doing a delegate call to CurveProxyPool 😢
Really complex and is not using at all FlashLoans!
etherscan.io/address/0x6186…
Really complex and is not using at all FlashLoans!
etherscan.io/address/0x6186…
Getting some food and continuing, seems really well studied and not easy.
Definitely very similar to what we call Remote Code Execution in traditional envs.
Closed the war room with @picklefinance team
Soon there will be (good) updates 💪
h/t @bneiluj @bantg @samczsun
Soon there will be (good) updates 💪
h/t @bneiluj @bantg @samczsun
• • •
Missing some Tweet in this thread? You can try to
force a refresh
