From TokenPost · · 50s
Slice FundsModule Exploit Costs $41,000
A security flaw in Slice’s FundsModule contract led to a $41,000 loss after withdrawals accepted reported amounts without verifying assets.
In brief
A security flaw in Slice’s FundsModule contract led to a $41,000 loss after withdrawals accepted reported amounts without verifying assets. Slice’s FundsModule contract exploit caused a $41,000 loss due to unverified withdrawals. Originally reported by TokenPost.
Security flaw in Slice FundsModule
An attacker exploited Slice’s FundsModule contract, causing a loss of about $41,000 after a withdrawal function accepted reported release amounts without checking that the corresponding assets had reached the contract.
Withdrawal function vulnerability
The function with selector 0x9d2edfac relied on release amounts reported by contracts selected by the caller and permitted withdrawals without verifying that FundsModule had received the corresponding Ether or USD Coin.
Previous smart contract incidents
This loss exceeds those in two earlier, separate smart contract incidents: a BitBay Vault exploit caused a loss of about 14,838.47 Dai and an Ethervista pool attack caused an estimated $18,600 loss.
What matters most
Slice’s FundsModule contract exploit caused a $41,000 loss due to unverified withdrawals.
