• 34ºc, Sunny

YOLO Games has stolen $1.50 million due to no permission check in exitPool function

On June 11, according to Twitter user @shoucccc, the Blast ecosystem project YOLO Games' liquidity pool on Bazaar was stolen 1.50 million dollars. The root cause is that there is no permission check in the exitPool function, allowing anyone to impersonate a liquidity provider and drain the fund pool.