Swan Treasury Private Key Leak Results in Loss of Approximately $625,000

The decentralized asset management protocol Swan Treasury on the BNB Chain suffered a loss of approximately $625,000 due to a private key leak. The attacker forged valid signatures to purchase STY at a 100x discount, using about 19,700 USDT to buy around 687,000 STY, and forged claim()/transfer signatures on a sibling contract. They then dumped the STY into the STY/USDT pool, profiting approximately 625,000 USDT. Each ecrecover in the transaction resolved to an exact hardcoded signer, confirming that the key itself was leaked, rather than a flaw in the signing logic.

This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.