SlowMist TI Alert WealthManagementV2 Loss: 26,414 USDT Root Cause: The owner privileges of the victimized contract were suspected of being illegally transferred (possibly due to a leaked private key). The new owner (attacker-controlled) can instantly set plan parameters (`period=0`, `interestMultiplier`/`unlockMultiplier=528,300,000`) via `updatePlanConfig` without timelock or bounds. This allows minting inflated interest by investing and redeeming in the same tx, then unlocking and withdrawing it via a second investment. Attacker: EOA `0xe439422afdd247503f75b4143c4a973eced04a36` Victim Contract: WealthManagementV2 `0x7b5dda5135811ec0870a75a04d0e1807edc3c93d` Transaction: https://((bscscan.com))/tx/0x117d672359c3eaa81167a68613c0c7a85ea9127014d1f3e3cd6a6f0fe6a592fe https://((bscscan.com))/tx/0x66822644d63004ad6b06f64408518ba3ec567bf864f733cb982d3d8b9fe8c0d2 Powered by http://SlowMist.AI