FFF

Insider Manipulation

Estimated loss

$1.03M

VERDICT —OUT OF SCOPE

Root cause is social engineering — privileged personnel deceived into authorizing the drain. Contract behaved as written. Defense lives in process controls (multi-party approval, M-of-N signoff windows), not in smart-contract review.

▰ METHOD

SOCIAL ENGINEERING

SOCIAL-ENGINEERING

Root cause

Root-cause analysis not yet published. The incident description below contains all currently available signal — review the attack transaction directly for definitive forensics.

Forensic narrative

It is reported that the FFF token deployed on the BSC has an abnormal additional issue event. This event is that the administrator of the original project party purchased the additional issue through the pre-set additional issue contract, and then sold the additional issued tokens and transferred the acquired assets in part. More than US $1.03 million of FFF tokens were sold in this issue. Attack method (per SlowMist): Insider Manipulation. Reported loss: $ 1,030,000.

Primary source

https://www.panewslab.com/zh/sqarticledetails/11pl2td6.html ↗

Sourced from

slowmist

Technical record