BlockSec: Two Contract Deployers Suspected of Being Exploited via Arbitrary Call Vulnerabilities, Suffering Cross-Chain Losses Exceeding $17 Million

Techub News reports, according to BlockSec Phalcon monitoring, a series of suspicious transactions occurred on networks such as Ethereum, Arbitrum, Base, and BSC several hours ago. Contracts deployed by two creators were attacked, resulting in cumulative losses exceeding $17 million. BlockSec stated that the victim contracts were not open-source and are suspected to have a vulnerability in an "arbitrary call" function. The attackers abused existing token authorizations and transferred assets through transferFrom operations. The address starting with 0xbee lost approximately $3.67 million, and the address starting with 0x9cb lost approximately $13.41 million.