POPA ReconRISEx XLP Vault's RWA Strategy Unauthorized Withdrawal of 673,011.57 USDC
RISEx XLP Vault's RWA Strategy Unauthorized Withdrawal of 673,011.57 USDC The attacker's wallet calls the contract it deployed. The contract literally took 673,011 USDC out of the RWA strategy - The withdrawn funds were immediately transferred to Ethereum and Base through the RiseVault OFT bridge within one transaction, and are currently being traded with SEAL 911. - The entire 673,011 USDC withdrawn was preserved as part of the fees generated from RISEx in July - Because caller verification is missing (or due to remaining approval), withdrawals by unauthorized third parties pass through.…
The excerpt is quoted from a public Telegram channel, which owns its text.