EtnProduct project hit by flash loan attack, attackers made about $10,000 in profits

Information from members of the Chengdu Lianan community shows that the EtnProduct project has been attacked by flash loans. The analysis of the security team of Chengdu Chain Security shows that the attacker first borrowed 9,400 USDT using flash loans, and then the attacker purchased an NFT and placed an order. Because the number of liquid tokens added when placing an order is fixed, and the certificate currency is sent to After identifying the caller, the attacker then destroys the tokens to get 606,091.527 U tokens in the liquidity, and calls the saleU function of the UMarket project to convert 11,253.735 U tokens into USDT one-to-one and return the flash loan. The total profit is about $3,074 and an NFT worth $7,380, the current profit funds are still stored on the attacker's address (0xde703797fe9219b0485fb31eda627aa182b1601e).