LeterTW

🚨SlowMist TI Alert🚨 💸 @Balancer Loss: ~234k USD 🔍 Root Cause: Balancer V1 BPool `joinswapPoolAmountOut` lets caller specify BPT output while `calcSingleInGivenPoolOut` reverse-computes input via 18-decimal fixed-point math. After attacker compressed WBTC reserves to dust via public swaps, the computed input rounded down to 1 satoshi WBTC yet full BPT was minted. Missing: minimum effective input, minimum pool balance, and relative-error validation; `MIN_BALANCE` only enforced in `bind/rebind`. 📌 Attacker: 0x338c7ec9befbb451d66fd8a468c32184f5689a41 📌 Attack Contract: 0x9caa8d0e44b22f50057d2f4ce0d1446529e11be3 📌 Vulnerable Contract: 0x2257aaac34bcb27900291f7b84ee2565a6cbac57 Impact: Nested flash loans (Spark/Aave, Morpho, Uniswap V3) funded WBTC reserve compression; 4,408.8 BPT minted at 1-satoshi WBTC per join, then proportionally exited to drain DPI, USDC, WETH, WBTC from the pool. Powered by SlowMist.AI Tx: etherscan.io/tx/0x72510b257c… etherscan.io/tx/0xeef311556b… etherscan.io/tx/0x37e47f0f5f… etherscan.io/tx/0xbaedc537df… etherscan.io/tx/0xb2d84f926b…

Neutrl has temporarily paused minting, redemptions, and other protocol functions following circumstances affecting protocol reserves. These measures have been taken in the interest of our users, after advice from legal counsel, to preserve an orderly process while the impact is assessed. Users will be provided with a clear and orderly process in due course. Further information on timing, and next steps will be shared as soon as available.

Curve bribes are back. 35M $SPELL → MIM-3Pool 35M $SPELL → MIM-2Pool 70M $SPELL total deployed to strengthen MIM liquidity across Curve. More to come. 🧙‍♂️

Dear Users, Over the past 24 hours, we have experienced an unprecedented level of withdrawal requests and have successfully processed more than 8.5 million USDT in instant redemptions. Given the sustained withdrawal demand and current market sentiment, we have made the difficult decision to begin an orderly wind-down of the Altura vault. Our priority remains the protection of user capital and ensuring all redemptions are completed in a fair, transparent, and efficient manner. To facilitate this process, we have notified all counterparties and partners of our decision and have started unwinding positions across the portfolio. These positions include allocations held on exchanges, private credit opportunities, and real-world asset strategies. While some positions can be redeemed immediately, others require standard settlement and redemption periods, and we are working closely with all counterparties to accelerate the process wherever possible. We want to reassure all users that the wind-down is being conducted in a structured manner and that capital is being returned as underlying positions are redeemed. Despite it being a weekend, our team has worked around the clock to process withdrawal requests and maintain continuous communication with partners and users. I am incredibly proud of the effort and commitment demonstrated by everyone involved during this period. Personally, I am deeply disappointed by how quickly misinformation and speculation can spread within the industry. Altura has always operated with transparency and integrity, and it is unfortunate to see unfounded narratives contribute to market fear and withdrawal pressure. Nevertheless, our focus remains unchanged: executing an orderly wind-down and returning capital to users as efficiently as possible. We will continue providing regular updates as redemptions progress and additional liquidity becomes available. Thank you for your trust and support throughout this process. Ranveer Arora CEO, Altura

Accountable has terminated its service agreement with MainStreet, effective immediately. MainStreet was unable to meet our verification standards. We recognize that markets relied on this feed and are working closely with partners across the ecosystem as the situation evolves. We will continue to hold this standard without exception.

2025年10月24日，我的 @ether_fi Cash卡遭到盗刷，共计约$497.84美元，我当天就冻结卡片随即联系客服发起争议。 @MikeSilagadze 在这篇帖子下公开承诺所有受盗刷影响的用户都将获得退款。 七个月过去了：没有退款、没有官方声称已发送的私信、有的只是一套重复粘贴的推诿说辞。 而其他用户的遭遇也与我基本一致。 以下是这几个月里实际发生的事： → 先后经手五位客服（Luna、Zucher、Zahar、Solomon、Leo），每次换人都要重新解释案情，毫无实质进展 → Visa 以「3DS 已验证」为由拒绝争议——但我从未收到任何验证请求，多次索要验证日志，至今无果 → 3 月收到的「调查结果」与最初的拒绝通知几乎一字不差，明显是模板复制 → 5 月 11 日客服明确 acknowledge 了我设定的 5 月 21 日截止日，截止日过去后直接消失 与此同时，@ether_fi 官方也声称已向受影响用户发送了私信。我从未收到任何私信。 更讽刺的是：就在同一天，@MikeSilagadze 亲自在 @wisdom_yang 的帖子下联系了另一位受害者并协助加急退款。我当时就在那条帖子的评论区里询问，留言至今还在。 同样的欺诈，同样的承诺，不同的待遇。 其他在 2025 年第四季度遭到盗刷的用户——你们的问题解决了吗？