Attacker drains $1.4M from CUT token pools via mysterious unverified contract
An account used an unreadable function to remove 1.4 million BSC-USD without needing to burn the equivalent LP tokens.
An attacker drained over $1.4 million worth of Bows Coin Synthetic US Dollar (BSC-USD) from a liquidity pool holding CUT tokens on Sept. 10, according to a report from blockchain security platform CertiK.
The CUT token contract relied on a separate, unverified contract to set its “future yield” parameter, and this separate contract was used to drain the BSC-USD through an unknown method.
CertiK reported the event on X.
Go to Source
Author: Christopher Roark
