Archived tweet

Tweet thread by CertiK Alert:

#CertiKSkynetAlert MEV robot hacked! (Loss ~2 million) The reason is that the MEV bot forgot to put permission limits on its functions. Here is the detailed analysis Tweeted at 9:55 PM · Nov 7, 2023 1/ MEV bot there exists an arbitrage trading function with no restriction on callers. So it's being attacked by forced arbitrage trading. Tweeted at 21h 2/ Attacker borrows a flash loan at Aave and exchanges a large amount of borrowed WETH for wBTC, throwing the curve's exchange pool out of balance. Tweeted at 21h 3/ The attacker called the MEV Bot's vulnerability function to force the buyer to buy wBTC at an unreasonable price, and the attacker then sold the WBTC at a high price to get back more WETH to realize the profit. Tweeted at 21h

Tweet #2

Image #1:

Image

Image #2:

Image