Earlier today, FomoWell experienced a hacker attack. According to our initial investigation, the attacker exploited a vulnerability in the SIWB authentication mechanism to carry out an unauthorized access attack. This resulted in abnormal sell orders and asset transfers in a small number of user accounts, affecting some token trading activities. However, due to our risk control and interception systems, no user assets were lost. The attacker was unable to withdraw any BTC, and all abnormal withdrawal attempts were successfully intercepted in real time. We have already taken the following actions immediately: Gained control of the attacker-related accounts Isolated the affected components Completed a full system review, fixed the vulnerability, and upgraded the code To ensure system security and integrity, trading and withdrawals have been temporarily suspended. The upgraded code will be submitted to a third-party auditing firm and Dfinity official engineers for further review. Once the audit is completed, all services will be restored as soon as possible. We appreciate your patience. FomoWell Canister address: dashboard.internetcomputer.org/bitcoin/accoun… Please rest assured that no user assets were lost in this incident, and the attacker was unable to transfer any funds. If any user losses are identified in relation to this incident, FomoWell will provide full compensation. Security is the foundation and the lifeline of FomoWell. We will complete all necessary measures and resume services as soon as possible. Thank you for your understanding and support. We will keep you updated with further progress.
