An analysis by security firm SlowMist reveals the theft was due to a compromised wallet extension that altered a user's intended transaction, not a flaw in the Venus protocol itself.
According to security firm SlowMist, a recent asset theft from a Venus protocol user resulted from a compromised wallet extension, not a protocol vulnerability. The analysis indicates the attacker replaced the victim's extension, which was used with a hardware wallet, to maliciously switch a 'redeem' operation to an 'updateDelegate' operation, enabling the theft. Tracing efforts have partially linked the stolen funds to Monero (XMR) and a sanctioned darknet exchange.