The PulseChain-based defi project BetterBank was exploited by an attacker who took advantage of a vulnerability that allowed them to <button class="define-target" id="mint">mint</button> arbitrary tokens, some of which they then swapped for ETH. The attacker later returned around $2.7&nbsp;million of the stolen assets, having cashed out around $1.4&nbsp;million.<p>The vulnerable <button class="define-target" id="smart-contract">smart contract</button> had been audited by cybersecurity firm Zokyo, which claimed they had flagged the issue during an audit. BetterBank responded by claiming that the auditors had either not identified or failed to communicate the true severity of the flaw.</p>

Archived tweet

Tweet by Chaofan Shou:

Tweet #1

Image #1:

Links: