Slow Fog Cosine Update Venus Security Event: Stolen Whale suffered a fixed-point attack, and related wallet expansion was replaced

According to ChainCatcher, Slow Fog Cosine updated Venus security incident on X platform as follows: In this whale stolen incident, the Venus protocol and front-end should be fine. At present, the analysis of Slow Fog Joint Partners tends to be targeted attacks on whales. Although the whale uses hardware wallets, the relevant wallet extensions (combined with hardware wallets) in the computer are replaced. When the user issues a normal redeemUnderlying operation, it is replaced with an updateDelegate operation, which eventually leads to the stolen assets in Venus. The hacker funds that targeted the targeted attack on this big player were exchanged from the privacy token Monero XMR. Other related funds traced back from eXch, which is the dark web trading platform that was previously sanctioned, and it is also a trading platform that North Korean hackers like to use before.