Root-cause analysis not yet published. The incident description below contains all currently available signal — review the attack transaction directly for definitive forensics.
A cross-chain stablecoin (TSD) on ETH and BSC stated that malicious attackers used TSD DAO to mint 11.8 billion TSD tokens in their accounts and sold them all on Pancakeswap. The specific process is that True Seigniorage Dollar stated that the developer account only has 9% of the DAO, and the malicious attacker has gradually controlled 33% of the DAO with the accumulation of low prices, and then proposed an implementation plan and voted in favor. In the implementation, the attacker added code to Mint and minted 11.8 billion TSDs for himself. Attack method (per SlowMist): Contract Vulnerability. Reported loss: $ 7,095,340.
- chain
- bsc
- protocol
- TSD
- bug_class
- logic
- date_occurred
- 2021-03-15
- loss_usd
- $7,095,340
- source_id
- sm:tsd::2021-03-15