Seems @origin_trail’s StakingStorage contract on Base was hacked~ 27M $TRAC
Seems @origin_trail’s StakingStorage contract on Base was hacked~ 27M $TRAC Rootcause: A flaw in the owner verification logic of the Hub contract. This allowed the attacker to call Hub.0x46e46a09() and register their malicious contract (0xAa86) into the authorized contracts list. The attacker then manipulated storage in StakingStorage to drain the funds. Attacker address: 0xbB31f31480Cf4BcF70d0E1ff0dF7f09218F8D2A3 Exploit transactions: •0x18ccaa7baba166fa45bbd75cc01d58f60f6b6ac2ad1425a6d93295ccff096533 •0xb8e2a8f2b7cd436c22b3eb05d307aee3e561185a2687e96187068b2ef28c1f7e @EthSecurity1
The excerpt is quoted from a public Telegram channel, which owns its text.