TechFlow news on October 11: According to monitoring by the Supremacy security team, on October 11, 2022, the deployer address of Paraswap initiated abnormal transactions across multiple chains (ETH, BSC, FTM), transferring all balances from its address to 0xf35875a064cdbc29d7174f5c699f1ebeaa407036. Analysis shows that this address belongs to a Profanity exploit attacker, with historical records indicating theft of assets from multiple vanity addresses. Investigation so far confirms only the Paraswap deployer's own funds have been compromised; the Paraswap multisig treasury (with a 2-signature threshold) remains unaffected for now. However, it cannot be ruled out that other multisig addresses were also generated using Profanity, meaning multisig treasuries may still be at risk. The Supremacy team has already contacted the official Paraswap team to relay these findings. We once again urge all users to immediately migrate away from any addresses generated via Profanity, as attacks targeting Profanity-generated addresses are ongoing.
Add to Favorites
Share to Social Media
