Aave Protocol Hack

A user's Aave Protocol assets were stolen using phishing attack, which resulted in a loss of 1,201,576 $USD.

A user approved trading for four different tokens of Aave Protocol, such as $aArbWETH, $aFanWETH, $aArbWBTC and $aFanUSDC, possible via phishing attack. The attacker took the assets and then swapped them into 1,201,576 $USDC using four smart contract with unverified source code, and than all selfdestructed. The funds were transferred through Celer Bridge.

Attacker addresses:

https://arbiscan.io/address/0x053a85c5…8408d1

https://arbiscan.io/address/0x0a009741…f00012

Malicious transaction:

https://arbiscan.io/tx/0x3c79b996…4a2467

Approval transaction:

https://arbiscan.io/tx/0x4d8ecb31…e54ed1