Hegic Options related contract lost $80k.
Victim contract has “withdrawWithoutHegic” function that withdraws user fund.

Unfortunately, developer forgot to reduce “t.share” value, user can withdraw multiple times.

Hacker just called withdraw function multiple times, drained all fund in victim contract.
Leave a Reply