BNB Chain's crypto DAO token Pro was attacked and the attackers earned about $52,000

The Chinese Community of GoPlus released an analysis of the attack on Crystal DAO, and on 28 July, the BNB Chain token for the attack on Crystal DAO was attacked with approximately $52,000 in proceeds and contract losses of $167,200 Pro, all of which were converted into US$USDT to receevers in the attack contract. The attackers repeatedly called the exec function in the contract of attack 0xc44f2a in a transaction, each time converting $50 Pro into $USDT, and repeatedly significantly raised the price of the Pro/USDT transaction to the medium $Pro, and eventually converted $USDT to profit. The underlying reason is that the exec function in the attack contract lacks access control and can be called by any contract。