SlowMist Cosine: GANA theft caused by leakage of GANA Payment Stake contract owner's private key

According to Odaily Planet Daily, SlowMist's Yu Xian posted on the X platform that the GANA theft was caused by the leakage of the GANA Payment Stake contract owner's private key. The subsequent attack used some techniques, such as the 7702 delegate exploit, which also bypassed the unstake's onlyEOA check. By changing the relevant Rate and Fee, the attacker achieved the result of unstaking a few hundred USDT to unstake hundreds of thousands of USDT.