Slow Mist: Unverified Contract Low-Level Call Vulnerability Leads to Theft of 16.6 WETH

Odaily News: According to Slow Mist's security team monitoring, an unverified contract exposed an unrestricted low-level call vulnerability via selector 0x42be3129, lacking access control and target data validation, resulting in the theft of approximately 16.6 WETH. The attacker exploited the contract's existing ERC20 allowance, bypassing owner checks to execute unauthorized transferFrom operations.