Security Firm Reports ETHFI Contract Vulnerability Leading to 15.45 ETH Theft

Blockchain security firm Slowmist reported that a specific contract vulnerability in the Ethereum staking protocol EthFi (ETHFI) has resulted in the theft of approximately 15.45 ETH (valued at roughly $38,000). The company explained that attackers exploited an access control flaw in the AtomicQueue contract by generating manipulated requests to make victim addresses appear as solvers. Subsequently, AtomicQueue abused existing ERC-20 token permissions to siphon funds.

As of CoinMarketCap data, ETHFI is trading at $0.6611, up 6.21% from its previous price.