🚨SlowMist TI Alert🚨 💸 @BitBayofficial Loss: ~$14K 🔍 Root Cause: The Vault's `_withdraw()` function transfers its entire token balance when `liquidity == 0`, without limiting the payout to the user's proportional share. The attacker exploited this flaw by triggering a
SlowMist reported a security incident at BitBayo, resulting in a loss of approximately $14,000. The vulnerability was in the Vault's `_withdraw()` function, which transferred the entire token balance when liquidity was zero, allowing an attacker to exploit it.