LienFinance was attacked and lost approximately US$542,000. Attackers used vulnerability to steal USDC

According to Slow Fog Monitoring, the decentralized financial protocol LienFinance was attacked. The attackers used smart contract vulnerabilities to mint unsecured bond tokens and stole approximately US$542,000. Taking advantage of this vulnerability, the attacker successfully minted new non-abnormal BondToken without destroying the corresponding input bonds, exchanged USDC through the pre-authorized address, and finally transferred approximately 542,144.63 USDC from the victim address. The analysis pointed out that this incident was essentially due to a verification flaw in the bond token exchange logic, which allowed attackers to bypass asset mortgage constraints and mingle unsupported assets.