ether.fi Loses Approximately 15.45 ETH Due to AtomicQueue Contract Vulnerability

The AtomicQueue contract of ether.fi has lost approximately 15.45 ETH due to a lack of access control in the solve() function. Attackers exploited the updateAtomicRequest() to create malicious requests, forcing the victim's address to act as the solver. Subsequently, AtomicQueue called the victim's finishSolve and executed want.transferFrom, abusing the existing ERC-20 authorization to transfer funds from the victim. SlowMist has disclosed this vulnerability to the ether.fi team, and the addresses of the attacker and the vulnerable contract have been made public.

This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.