Attacker drains $1.4 million from CUT token pools via mysterious unverified contract

An account used an unreadable function to remove 1.4 million BSC-USD without needing to burn the equivalent LP tokens.

An attacker drained over $1.4 million worth of Bows Coin Synthetic US Dollar (BSC-USD) from a liquidity pool holding CUT tokens on September 10, according to a report from blockchain security platform Certik. The CUT token contract relied on a separate, unverified contract to set its “future yield” parameter, and this separate contract was used to drain the BSC-USD through an unknown method.

CertiK reported the event on X.

Source: Certik.

Read more

An account used an unreadable function to remove 1.4 million BSC-USD without needing to burn the equivalent LP tokens.
An attacker drained over $1.4 million worth of Bows Coin Synthetic US Dollar (BSC-USD) from a liquidity pool holding CUT tokens on September 10, according to a report from blockchain security platform Certik. The CUT token contract relied on a separate, unverified contract to set its “future yield” parameter, and this separate contract was used to drain the BSC-USD through an unknown method.CertiK reported the event on X.Source: Certik.Read more