Paidun: The root cause of the FEG attack was the composability problem that occurred when integrating with the Wormhole bridge

Odaily reported that Peckshield analyzed the latest FEG hacking incident, and the root cause seems to be the composability issue when integrating with the underlying Wormhole bridge used for cross-chain messaging/token transfer. Specifically, the hacker created a fake deposit message (through an unexpected Wormhole relayer interface, the audited FEG SmartBridge does not support), and then transmitted it to another chain and received by the FEG SmartBridge (now disabled) to extract FEG tokens. Note that the SmartDeFi code was not affected. Meanwhile, the Wormhole Foundation stated: "The FEG security incident is unrelated to Wormhole. All Wormhole contracts are completely unaffected and have nothing to do with this issue." Previously, it was reported that FEG was suspected of being attacked and lost about $1 million.