According to Foresight News , SlowMist's analysis indicates that the root cause of the vulnerability in IPOR's Fusion is a flaw in the underlying contract delegated through the EOA account controlled by the project team via EIP-7702. This vulnerability allows for arbitrary external calls, enabling attackers to create and configure malicious circuit breaker contracts for Plasma Vault, thereby extracting funds from the contract.
According to Foresight News , Fusion released a security update today stating that the IPOR USDC Fusion Optimizer was compromised by an Arbitrum Vault vulnerability, resulting in a loss of $336,000. The DAO will fully compensate affected users.
