A bug in Seneca Protocol's <button class="define-target" id="smart-contract">smart contract</button> has allowed attackers to steal funds from users who had approved the contract. So far, around $3&nbsp;million has been stolen across the Ethereum blockchain and Arbitrum <button class="define-target" id="layer-2">layer-2</button>.<p>Making things worse, although the project's smart contract inherits the <code>Pausable</code> module that should allow the Seneca team to halt the malfunctioning code, they never implemented the function, meaning there's no way for them to stop the thefts. Instead, individual users must each revoke access to the flawed contract.</p>

Archived tweet

Tweet by PeckShield:

Tweet #1

Image #1:

Image #2:

Image #3: