Slow Mist Cosine: The front end of Safe has been tampered with and forged to achieve the effect of deception. North Korean hackers have carried out similar operations many times
SlowMist founder Cosine posted on social media that there is no problem with the Safe contract, the problem is in the non-contract part, the front end is tampered with and forged to achieve the effect of deception. This is not an isolated case. North Korean hackers have succeeded in this method several times last year, such as the WazirX incident (stolen $230 million, Safe multi-signature), Radiant Capital incident (stolen $50 million, Safe multi-signature), DMM (stolen $305 million, Gonco multi-signature). This attack method is well-engineered. Other companies also need to pay more attention. Multi-signature may not only have such attack points in Safe.