GenomesDAO Hack

GenomesDao was attacked. Three smart contracts were attacked and the amount that was stolen by the hacker is approximately $43k.

GenomesDAO is a DAO focused on secure, private and verifiable monetization of genomic data using DeFi.

There was a vulnerability in the contract due to which an hacker can repeatedly invoke "victim" contracts. The hacker first created fake LP tokens and using the initialization function, he was able to install a real LP contract token on a fake one.

The hacker then supplied a fake token using the shake function to get the LP tokens of the contract. Then the hacker uses the initialization function to return to the original LP-token and revokes the real LP of the contract using the output function.

Thus, the hacker was able to take a profit of about $43k.

Victim addresses:

1. Address
2. Address
3. Address

Attacker address: https://polygonscan.com/address/0x43ec1d16…bed7a3

Attacker smart contract addresses:

1. Address
2. (Token) Address

Transactions:

Swap $AnyMATIC to blockchain $MATIC: https://polygonscan.com/tx/0x074f3076…509311