SlowMist Alert: Two Attackers Are Replicating the Notional Finance Vulnerability on BSC

TechFlow: On September 7, monitoring by blockchain security firm SlowMist (@SlowMist_Team) indicates that two attackers are replicating the recent Notional Finance vulnerability exploit on the BSC chain. They have completed the pre-attack phase by creating malicious fCash positions using the same vulnerability pattern. The attack has not yet been fully executed; the malicious positions are currently awaiting maturity. Once mature, attackers could potentially settle the positions and withdraw assets from the protocol. The potential victim address is 0x0795E2cd771788572b61BeA45Abd6E9a8FC8D9F0. SlowMist strongly recommends that relevant projects take immediate mitigation measures before the positions mature.

Previously, the Notional Finance V1 contract was exploited on September 5, resulting in the loss of approximately $1.7 million in user funds. The affected contract has since been suspended.