Thread by @DFXFinance

1) Today we were notified about suspicious activity happening in the #DFX contracts. The attack started at Nov-10-2022 07:21:59 PM +UTC originating from wallet 0x14c19962e4a899f29b3dd9ff52ebfb5e4cb9a067.

2) We were notified of the suspicious activity within 20-30 mins of the first transaction and executed a pause on all #DFX contracts within a few minutes after confirming the attack.

3) The attacker previously held the funds in 0x14c19962e4a899f29b3dd9ff52ebfb5e4cb9a067 before converting what was available to #ETH and moving it to @TornadoCash.

4) #NZDS that did not have liquidity to convert to #ETH was bridged to Polygon and #CADC was frozen within the wallet by @PayTrie.

5) During the attack process, an #MEV bot 0x6c6b87d44d239b3750bf9badce26a9a0a3d2364e was able to extract value from the hacker and incidentally gain a large sum of the funds currently held in wallet 0xfde0d1575ed8e06fbf36256bcdfa1f359281455a.

6) We urge the #MEV bot owner to get in contact with us here on Twitter or at our Telegram and Discord.

Polygon pools were not affected as we were able to pause the contracts before the attacker made his way to the polygon side.

7) Polygon contracts are susceptible to the same attack vector and we will be initiating an emergency shut down of those pools.

We ask Polygon LP holders to withdraw funds from their respective #DFX pools once we turn on withdraw-only capabilities.

8) Stay tuned for communications on this.

We will also be issuing a full post mortem after further review with auditors and forensic analysts and provide more details at a later time.

Thank you for your patience. 💜