CertiK: Dough was attacked due to arbitrary call vulnerability in the contract, and the white hat hacker returned 76 ETH

According to BlockBeats, on July 17, security agency CertiK released a report on the Dough Finance vulnerability incident. The report shows that Dough Finance was exploited in multiple flash loan transactions on July 12, and hackers made a profit of about $2.1 million, of which about 76 ETH (about $260,000) has been returned by white hat hackers. The attacker exploited the arbitrary call vulnerability in the Dough ConnectorDeleverageParaswap contract to transfer WETH directly from the vulnerable contract.