🍩 Dough Finance, a DeFi protocol, just lost $1.8M in a flash loan attack. The culprit, funded through the ZK protocol Railgun, swapped the stolen USDC for 608 ETH. The security firm Olympix pointed out the loophole: unvalidated calldata within a contract. The good news? Aave pools are safe. Olympix's advice to Dough users: withdraw funds and avoid interacting with the protocol until further notice. In 2024, the crypto world lost over $1B due to security incidents. CertiK's report shows that phishing attacks and private key compromises are the main culprits. Stay safe, folks! 💼