Beosin: New free dao attackers used flash loans to repeatedly receive airdrop rewards, earning about 4481 WBNB

According to the monitoring of the Beosin EagleEye platform, the New free dao project was hacked and lost about 4481.3 WBNB (about 1.25 million US dollars). The Beosin security team analyzed and found that the attacker first used the flash loan to lend WBNB, and replaced all of them with NFD tokens, then used the attack contract to repeatedly create multiple attack contracts to receive (0x8b068e22e9a4a9bca3c321e0ec428abf32691d1e) airdrop rewards, and finally exchanged them for WBNB to return the flash loan Arbitrage out. At present, the attacker has converted the profitable 2,000 BNB into 556,000 USDT, and stored it and the remaining 2,481 BNB in the attacker's address. Beosin trace is monitoring and tracking the stolen funds in real time.