Protocol Vulnerability Explosion: Authority Change One Week Prior Triggered Hack

A recent major attack on a DeFi protocol was analyzed. One week before the attack, the protocol changed its multisig mechanism to a '2/5' model and removed the timelock. The attacker gained admin rights, then minted fake tokens, manipulated oracles, disabled security features, and siphoned assets, revealing critical flaws in authority management and security design.

Read More