Beosin: MTDAO attackers profited by calling the sendtransfer function in the MT and ULM token contracts

According to the detection of the Beosin EagleEye Web3 security warning and monitoring platform, the unopened contract 0xFaC064847aB0Bb7ac9F30a1397BebcEdD4879841 of the DeFi project MTDAO on BNB Chain was attacked by flash loans, and the affected tokens were MT and ULM. The attacker earned a total of 1,930 BNB (approximately $527,000). According to Beosin analysis, the attacker used the 0xd672c6ce and 0x70d68294 functions in the unopened contract to call the sendtransfer function in the MT and ULM token contracts to make a profit (because it is also deployed by the project party, the unopened contract 0xFaC06484 has minter permissions). The attacker transferred 1030 BNB in the stolen funds to the address starting with 0xb2e8 and transferred them to Tornado Cash, and the remaining funds were traded for other tokens and transferred to other addresses.