According to TechFlow, on January 12th, TechFlow reported that the Truebit protocol suffered a security vulnerability attack on January 8th. Attackers exploited an integer overflow vulnerability in its Purchase contract to mint tokens at almost zero cost and steal 8,535 $ETH (approximately $26.44 million).
The root cause of the incident was the lack of overflow protection in integer addition, leading to incorrect price calculations. The SlowMist team recommends that contracts compiled using Solidity versions earlier than 0.8.0 should always use the SafeMath library to protect all arithmetic operations and prevent overflow-related logical flaws.
