According to ChainCatcher news, the Snapshot governance page shows that the NFT lending protocol JPEG'd community has initiated a proposal vote for "using treasury funds for airdrop mining," intending to allow the project team to utilize a portion of the funds in the treasury for airdrop mining, such as Eigenlayer, Blast, etc., to permit the project team to use up to 50% of the Ethereum in the treasury for airdrop mining strategies.

ChainCatcher message, DeFi public product JPEG'd tweeted that the DAO multi-signature address confirmed the receipt of 5494.4 WETH, and the owner of the address that recovered the funds from the pETH vulnerability received a 10% (610.6 WETH) white hat bounty.

ChainCatcher news, according to MistTrack data monitoring, the JPEG'd attacker may have returned all 6106.75 ETH to the project party.Previous report, on July 30, the NFT lending protocol JPEG'd suffered a reentrancy attack, resulting in a loss of at least approximately 10 million dollars.

ChainCatcher message, JPEG'd official stated that the pETH-ETH curve pool was attacked, but other NFTs and treasury assets are safe.

ChainCatcher message, according to the analysis by the Beosin security team, the root cause of the attack on the JPEG'd project lies in a reentrancy issue.It is reported that the attacker added liquidity through reentrancy into the add_liquidity function while calling the remove_liquidity function to remove liquidity. Since the balance update occurs before reentrancy into the add_liquidity function, this leads to an error in price calculation.

ChainCatcher news, according to PeckShield monitoring, the NFT lending protocol JPEG'd is suspected to have been attacked, with 6,106.65 WETH (approximately 11.45 million USD) transferred to address 0x94...A6Ab at 21:10.