The wallet that deployed the DAI smart contract is compromised on all L2 networks except Arbitrum and Optimism. This was noticed by information security researcher Christopher Mooney.
According to the expert, the DAI address was originally generated using the Profanity Vanity Address tool, which later turned out to be vulnerable.
"The source address was created using a large GPU cluster, so we knew it would take some time for an attacker to find the private key. We left a 1 ETH bait at the address and confirmed the exploit in July", Mooney wrote.
He stressed that the funds of DAI holders on Optimism and Arbitrum are safe, but this is not the case for other networks. The expert has already found malicious contracts placed by the attacker in the Base and Polygon blockchains.
He called for all instances of the compromised smart contract to be marked after 2023 as phishing.
According to the expert, the DAI address was originally generated using the Profanity Vanity Address tool, which later turned out to be vulnerable.
"The source address was created using a large GPU cluster, so we knew it would take some time for an attacker to find the private key. We left a 1 ETH bait at the address and confirmed the exploit in July", Mooney wrote.
He stressed that the funds of DAI holders on Optimism and Arbitrum are safe, but this is not the case for other networks. The expert has already found malicious contracts placed by the attacker in the Base and Polygon blockchains.
He called for all instances of the compromised smart contract to be marked after 2023 as phishing.
