According to Beosin Alert's monitoring and warning, the cross-chain protocol LI.FI has been attacked. The main method was that the attacker used a call injection in the project contract to transfer away assets authorized to the contract. Beosin Trace tracked the stolen funds and found that losses included 6.3359 million USDT, 3.1919 million USDC, and 169,500 DAI, approximately $10 million.
The attack occurred on both ETH and Arbitrum chains. Currently most of the funds have been converted into ETH with no new movements detected yet. Beosin has added hacker-related addresses to its KYT blacklist database and will continue tracking them closely.