SlowMist: Unverified low-level contract call vulnerability leads to the theft of 16.6 WETH.

According to Odaily Planet Daily, SlowMist security team monitoring revealed that an unverified contract suffered a vulnerability due to an unrestricted low-level call vulnerability exposed by selector 0x42be3129. This vulnerability lacked access control and target data verification, resulting in the theft of approximately 16.6 WETH. The attacker exploited the contract's existing ERC20 authorization limit to bypass owner checks and execute an unauthorized transferFrom operation.