Beosin Trace: Analysis of the $10 million loss in the LI.FI attack

According to Beosin Alert monitoring and early warning, the cross-chain protocol LI.FI was attacked. The attacker used the call injection of the project contract to transfer the user assets authorized to the contract. Beosin Trace tracked the stolen funds and found that the loss amount included 6.3359 million USDT, 3.1919 million USDC, 169,500 DAI, about 10 million US dollars. The attack occurred on the ETH and Arbitrum chains. At present, most of the funds have been transferred to ETH and there is no new movement. Beosin has added the hacker-related addresses to the KYT black address library and will continue to track and pay attention in the future.