Beosin: New free dao attackers exploit flash loans to repeatedly claim airdrop rewards, profiting approximately 1.25 million USD

According to Chain Catcher news and monitoring from the Beosin EagleEye platform, the New free dao project has suffered a hacker attack, resulting in a loss of approximately 4481.3 WBNB (about 1.25 million USD). The Beosin security team analyzed that the attacker first used a flash loan to borrow WBNB, exchanged all of it for NFD tokens, and then repeatedly created multiple attack contracts to claim airdrop rewards (0x8b068e22e9a4a9bca3c321e0ec428abf32691d1e) using the attack contract. Finally, they exchanged it back for WBNB to repay the flash loan and exit with profits.

Currently, the attacker has exchanged the 2000 BNB gained into 556,000 USDT, and both this and the remaining 2481 BNB are held in the attacker's address. Beosin trace is actively monitoring and tracking the stolen funds in real-time.