(CyversAlert)
@ShidoGlobal recently experienced an unexpected transfer of ownership at (https://etherscan.io/tx/0xaa76ea503fadddf775b1ef7f195676440fdc3ac46ab642798ab6fa7ae3aafcbe)
The new owner promptly upgraded the StakingV4Proxy contract by incorporating a hidden withdrawToken() function, enabling them to withdraw the entire balance of 4,353,473,223.864904 #SHIDO tokens.
The total loss resulting from this incident amounts to approximately $4M. The attacker swapped a portion of the $SHIDO to #ETH , sending 692.8 $ETH $2.4M to the following address: (https://etherscan.io/address/0x4621e0cd8c91ecf1b0efcbf07f0838a5ee25c5dd)
The remaining #SHIDO tokens worth $1.6M are still held in the attacker's address: (https://etherscan.io/address/0x1982358c84da9d0b4b96fc9e8564d132f7d0041f)