DeTracker Security Feed

$1.1B lost this week $2.1B lost in 30 days $95.0B lost this year

🚨SlowMist TI Alert🚨 💸 @X7_Finance Loss: ~6.78 ETH 🔍 Root Cause: In `claimRewards()`, `totalRewards` is incremented by `(address(this).balance - lastETHBalance)` on every call, but `lastETHBalance` is only updated when `claimable > 0`. Calling with an empty array leaves

X7.Finance experienced a loss of approximately 6.78 ETH due to a vulnerability in its `claimRewards()` function. The `totalRewards` variable was incorrectly incremented without proper updates to `lastETHBalance` when rewards were not claimable.

Source: SlowMist Team (opens in a new tab)

#X7.Finance