Request Finance Publishes an attack incident report

Integrated financial platform Request Finance attack incident report, only one user was affected by this incident. The attacker hacked the Request Finance front-end system on September 10, injecting authorization instructions into a contract that appears to be the same (name, address, part of ABI interface, recent activity). When the victim pays, not only transfers money to the normal contract, but also authorizes the contract to consume USDC unlimited. The team has implemented additional protection mechanisms and monitoring measures.