What happened
Quick Summary
On April 24th, FENGSHOU (NGFS) was exploited. $191k was gained as an attacker's profit.
Details of the Exploit
The FENGSHOU (NGFS) token contract has an access control vulnerability in the delegateCallReserves function, which allowed a malicious actor to change the UniSwapV2 proxy address. This created an opportunity for the exploit, resulting in the actor earning approximately $191,000 in USDT tokens.
Block Data Reference
Attacker:
Attacker contract:
Exploit tx:
Protocol details
Classification
Token / Access Control
Protocol Type
Exploit/Access control
Implementation language
Solidity
Evidence
- report @CertiKAlert incident report x.com
- analysis DeFiLlama defillama.com
Understand the attack patterns
Build your security review skills
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.
