Hedera tweeted to disclose the details of the attack. The attacker attacked the smart contract service code of the Hedera main network and transferred the Hedera Token Service tokens held by some user accounts to their own accounts. The attackers targeted accounts used as liquidity pools on multiple DEXs migrated to use the Hedera Token Service using Uniswap V2-derived contract generations, including Pangolin Hedera, SaucerSwap, and HeliSwap. When attackers moved tokens obtained through the attack to a Hashport Network bridge, bridge operators detected the activity and acted quickly to disable it. To prevent attackers from stealing more tokens, Hedera shut down the mainnet proxy, which removes user access to the mainnet. The Hedera team has identified the root cause of the issue and is working on a solution. Once the solution is ready, Hedera council members will sign the transaction to approve the deployment of the updated code on mainnet to eliminate this vulnerability, at which time the mainnet proxy will be reopened. Foresight News Note: The Hedera Token Service supports provisioning, management and transfer of native fungible and non-fungible tokens on the public Hedera network.
Joy
