Unleash Protocol suffered a significant attack resulting in the theft of approximately US$ 3.9 million in funds. The vulnerability was identified in the platform’s smart contract security mechanisms, allowing an attacker to gain unauthorized access to the system.
How the Attack Occurred
The exploitation originated from the protocol’s multisig governance architecture, which had authorization loopholes. Through this flaw, the attacker was able to perform unauthorized updates to the smart contracts and withdraw funds without proper restrictions. The stolen assets included over 1,337 ETH, which were later transferred through Tornado Cash to obscure the transaction trail.
Impact on the Ecosystem
While the main blockchain of the Story Protocol remains intact and was not directly affected, the incident undermines trust and could significantly impact the project’s development timeline. The severity of the attack led Unleash Protocol to suspend all its operations immediately.
Next Steps
The protocol team is actively investigating with the goal of recovering the stolen funds. This event underscores the importance of rigorous audits of smart contracts and continuous improvements in multisig governance security mechanisms.
This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.
Unleash Protocol Smart Contract Exploitation Results in a $3.9 Million Loss
Unleash Protocol suffered a significant attack resulting in the theft of approximately US$ 3.9 million in funds. The vulnerability was identified in the platform’s smart contract security mechanisms, allowing an attacker to gain unauthorized access to the system.
How the Attack Occurred
The exploitation originated from the protocol’s multisig governance architecture, which had authorization loopholes. Through this flaw, the attacker was able to perform unauthorized updates to the smart contracts and withdraw funds without proper restrictions. The stolen assets included over 1,337 ETH, which were later transferred through Tornado Cash to obscure the transaction trail.
Impact on the Ecosystem
While the main blockchain of the Story Protocol remains intact and was not directly affected, the incident undermines trust and could significantly impact the project’s development timeline. The severity of the attack led Unleash Protocol to suspend all its operations immediately.
Next Steps
The protocol team is actively investigating with the goal of recovering the stolen funds. This event underscores the importance of rigorous audits of smart contracts and continuous improvements in multisig governance security mechanisms.