Beosin: The attacker executed the transaction of modifying the router address of the TradeHelper contract by using the multi-signature wallet

On February 21, according to the Beosin EagleEye security risk monitoring, early warning and blocking platform monitoring of Beosin, a blockchain security audit company, the Hope Finance project Rug Pull. The Beosin security team found that the attacker (0xdfcb) used the multi-signature wallet (0x1fc2) to execute the transaction of modifying the router address of the TradeHelper contract, so that when the GenesisRewardPool contract used the openTrade function for borrowing and lending, it called the TradeHelper contract SwapWETH function for swap, and did not swap through the original sushiswap router, but directly sent the incoming token to the attacker (0x957d) to gain profits. The attackers withdrew about $1.8 million twice.

Interpretation of this information:

The message discusses a security breach in the Hope Finance project, which resulted in a Rug Pull. Beosin EagleEye, a security monitoring platform, detected that an attacker used a multi-signature wallet to modify the router address of a contract, allowing them to profit from the project’s funds. The attacker was able to withdraw approximately $1.8 million twice.

The incident highlights the importance of blockchain security measures and the risks associated with using decentralized platforms. It is important to have reliable security auditing companies such as Beosin in place to detect and prevent fraudulent activities.