Vulnerability led to theft of 133.7 ETH: A MAJOR issue in the Rebalancer contract on Base Chain was exploited, resulting in the theft of 133.7 ETH, approximately 501,000 USD in value. The flaw was linked to the contract’s open() function, allowing the injection of any pool strategy contract address.

Urgent need for improving contract security: The attacker used a reentrancy operation by inputting a malicious contract during burn execution, gaining an extra 50% of ETH. This incident underscores the pressing necessity for improving smart contract security to prevent similar breaches in the future.