Details
Lien Finance, a decentralized finance protocol, has suffered a security breach resulting in the loss of approximately $542,000 in USDC. According to monitoring by SlowMist, the attacker exploited a smart contract vulnerability to mint unbacked bond tokens and drain funds. The exploit involved a flaw in the bond token redemption logic, allowing the attacker to mint new abnormal BondTokens without burning the corresponding input bonds. Through a pre-authorized address, the attacker then converted these tokens into USDC, ultimately transferring about 542,144.63 USDC from the victim address. The incident highlights a validation defect in the bond token exchange mechanism, enabling the attacker to bypass asset collateral constraints and create unsupported assets.
