ETHMACOAPY Loses Approximately 8.11 WETH

The old version of Set Protocol product ETHMACOAPY on Ethereum lost approximately 8.11 WETH in two transactions from different addresses. The reason is that the actualizeFee() function rounds up the redemption of the corresponding collateral even when no fees are to be paid. The attacker first transferred collateral to the contract and triggered a recalculation, then redeemed temporary tokens, retrieving more collateral than initially invested, thereby depleting the reserves of other holders. The second transaction withdrew approximately 4.062 WETH, nearly exhausting the reserves recorded in this Set.

This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.