MakerDAO Legacy Auction Contract Exploited, Attacker Takes 200 ETH

Security firm CertiK's analysis reveals that a legacy MakerDAO auction keeper contract was exploited, resulting in the attacker taking away 200 ETH, valued at over $500,000. The root cause was the lack of access control for the 0x8804d1de function in the keeper implementation contract. This contract was involved in the "Black Thursday" liquidation crisis in March 2020, where it won ETH with zero bids, and four bids of 50 ETH each remained unsettled. The attacker exploited this to withdraw the funds and transferred them out in batches of 10 ETH via Tornado Cash. Although this contract is not part of the current core Sky ecosystem, the old contracts with remaining funds may still become targets for attacks.

This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.