FutureSwap suffers another attack; Arbitrum contract exploited, resulting in a loss of approximately $74,000.

According to BlockSec Phalcon, FutureSwap's contracts on the Arbitrum chain were attacked again, with estimated losses of approximately $74,000. This attack exploited a reentrancy vulnerability, with the attackers operating in two steps: first, during a liquidity provision three days prior, they used the reentrancy vulnerability to mint an excessive amount of LP tokens; then, after waiting three days, they burned these illegally minted LP tokens to redeem the underlying collateral, stealing funds from the protocol and profiting.