私钥泄露致损失约62.5万美元，Swan Treasury遭攻击

Odaily News: Swan Treasury, a decentralized asset management protocol on BNBChain, suffered a loss of approximately $625,000 due to private key leakage. The attacker forged valid signatures to their own self-held address, purchased STY at a 100x discount, and used a PancakeSwap flash loan to buy approximately 687,000 STY with around 19,700 USDT. Subsequently, the attacker forged claim() and transfer signatures on a sibling contract, dumping STY into the STY/USDT pool and profiting approximately 625,000 USDT. Each ecrecover in the transaction resolved to the exact hardcoded signer, confirming that the key itself was compromised rather than a flaw in the signature logic.