SlowMist Team: Resupply Attacker Steals Assets through Interest Rate Surge Vulnerability, Hacker's Gas Comes from Tornado Cash

BlockBeats News, June 27th, SlowMist founder Yuxian stated that the decentralized stablecoin protocol Resupply was exploited by an attacker through a interest rate inflation vulnerability to steal assets. The attacker triggered price inflation by donating to the new treasury's Controller contract, causing the exchangeRate to become 0, bypassing the collateral check. Ultimately, the attacker was able to borrow a significant amount of reUSD with only 1 wei of collateral. The hacker has since converted the stolen funds to ETH, valued at approximately over $9.5 million. The hacker's Gas came from Tornado Cash.