TechFlow reports that SlowMist founder Yu Xian has taken to Twitter to warn BSC users to check whether they unknowingly granted asset approvals a year ago to the malicious contract 0x75117c9158f53998ce8689B64509EFf4FA10AD80, in order to prevent asset theft.
He stated that recently, some users discovered their assets were suddenly stolen after transferring large amounts into this contract.
Yu Xian recommends using tools such as Revoke.cash and Rabby Wallet to check for and revoke any abnormal authorizations granted to this contract.
He analyzed that the malicious contract contains a backdoor allowing arbitrary transfer of authorized assets. Since no suspicious authorization records appear on-chain, users may only realize their accounts have been compromised after depositing significant assets.
Related hacker addresses include: 0xE2A178C2C5C4920C1b2B947A35edDb4f8EcBb7dD and 0xB88457b62491CBcEc42203672cFcb4269bd64c7e.
