POPA Recon@Lumi_Finance hacked for ~ $264k
@Lumi_Finance hacked for ~ $264k Root Cause: A vulnerability in Lumi smart accounts allowed token approvals to be performed as a side effect during UserOperation validation. Due to improper validation logic, an attacker-controlled paymaster could trigger approval operations during the validation phase and obtain ERC20 allowances from multiple smart accounts without explicit user intent. Attacker: 0xce1a3bb0b98d0d90c7dd0620ab86c9a771888d88 Victim: Multiple Lumi smart accounts affected by unintended token approvals during UserOp validation Malicious contract: 0x56362412ae17cac443aafbab4289946a…
The excerpt is quoted from a public Telegram channel, which owns its text.