FutureSwap Suffers Another Attack, Arbitrum Contract Exploited Resulting in Approximately $74,000 Loss

According to monitoring by BlockSec Phalcon, FutureSwap's contract on the Arbitrum chain has been attacked again, with estimated losses of approximately $74,000. This attack exploited a reentrancy vulnerability, with the attacker operating through a two-step process: first, during a liquidity provision transaction three days ago, they used the reentrancy vulnerability to mint an excessive amount of LP tokens; then, after waiting for three days, they burned these fraudulently minted LP tokens to redeem the underlying collateral assets, thereby stealing funds from the protocol and realizing a profit.