Shezmu Vault Exploited, Users Advised to Avoid DApp Interaction

According to Foresight News, the leveraged yield protocol Shezmu has announced that one of its vaults has been exploited. Users are advised not to interact with its DApp until further notice. Shezmu has offered a 10% bounty of the exploited funds to the hacker if they return the funds within 24 hours. The protocol has also updated that it has recovered 282.18 ETH from a white hat bounty hunter. Additionally, Ancilia monitoring has reported that Shezmu (ShezETH) was attacked, potentially due to a key leak. An extra 9,900 ShezETH tokens were minted and exchanged for 332 ETH, valued at $880,000. The minter was granted the contract 17 days ago. Furthermore, ShezmuUSD was also compromised, though it is unclear if this is related to the Deployer key leak. The collateral contract lacks mint() protection, allowing anyone to mint collateral tokens.