BlockSec: BarnBridge governance attack is suspected to have caused losses of approximately $776 million

On 15 July, BarnBridge SMART Yield (cUSDC) agreement was attacked in the Ether factory, at a loss of approximately $776 million, suspected of being a governance attack, according to BlockSec Phalcon. The attackers first received DAO governance authority, then upgraded the SmartYield/controller agent to a maliciously executed contract, which was then called upon by the CompundProvider's takeUnderlying Privileges function, to use a USDC mandate pre-existing in 50 user accounts to transfer pooled funds to the attackers through transfer Fees。