Security Team: Rikkei Finance hacked due to lack of access control to function `setOracleData`

On April 15, according to the monitoring of the CertiK security team, Rikkei Finance was exploited at 11:18 on April 15, 2022 Beijing time, and the loss was about 2671 BNB. Due to the lack of access control to the `setOracleData` function, the attacker changed the oracle machine to a malicious contract, stole USDC, BTCB, DAI, USDT, BUSD, BNB from it, exchanged them all for BNB, and then transferred the assets through Tornado Cash .

Related Ad

Comments (No)

Leave a Reply