Security· ★★· bearish·

Salus: Revenue Family project drains USDG via malicious approvals

  • —Attackers obtained permit signatures granting unlimited USDG allowance
  • —Funds were drained via transferFrom within the same transaction
  • —Stolen funds were split between two hacker addresses 80/20
  • —On Oct 1 the project said its social accounts were compromised and paused swaps
Why it matters: The permit-based attack highlights the growing risk of malicious token approvals, urging users to revoke unused allowances.
Source: PANews