Ethereum's Dolomite Exchange Contract Suffers Authorized Attack

According to Foresight News, the Ethereum-based Dolomite Exchange contract has been subjected to an authorized attack. Hackers exploited the batchTransfer function of its TradeDelegate contract, stealing tokens authorized by users to this contract. The batchTransfer function imposes restrictions on callers, requiring authorized addresses to call it. The authorized address is a contract, and its submitRingsThroughDyDx function can call the TradeDelegate contract's batchTransfer function, resulting in a large number of users' tokens being stolen by hackers through transferfrom. The TradeDelegate contract has now revoked authorization for the aforementioned contract, and the stolen funds are still stored in the attacker's address. Beosin Trace will continue to monitor the movement of the stolen funds.