SWEAT💧

We are pleased to confirm that ALL external account balances have been fully restored and operations are back to normal. We deeply appreciate the support and advice from the community that helped us to resolve this quickly. Special thanks goes to @MEXC for prompt freezing of the attacker’s account and to @rhea_finance for coordinating the response across @NEARProtocol ecosystem. More details on the incident below.

We are pleased to confirm that ALL external account balances have been fully restored and operations are back to normal. We deeply appreciate the support and advice from the community that helped us to resolve this quickly. Special thanks goes to @MEXC for prompt freezing of the attacker’s account and to @rhea_finance for coordinating the response across @NEARProtocol ecosystem. More details on the incident below.

We are pleased to confirm that ALL external account balances have been fully restored and operations are back to normal. We deeply appreciate the support and advice from the community that helped us to resolve this quickly. Special thanks goes to @MEXC for prompt freezing of the attacker’s account and to @rhea_finance for coordinating the response across @NEARProtocol ecosystem. More details on the incident below.

🚨Community Alert: Ongoing exploit on @SweatEconomy on @NEARProtocol. Exploiter: 3be304b2151870b2be88b9de0b80acab921337ad152584138bd852fc6e9ae018 Largest exploit tx: DvrSMfY85Anc6AuLUmoEDkDdab7qX5NUZLu76HN8NoPn

We are pleased to confirm that ALL external account balances have been fully restored and operations are back to normal. We deeply appreciate the support and advice from the community that helped us to resolve this quickly. Special thanks goes to @MEXC for prompt freezing of the attacker’s account and to @rhea_finance for coordinating the response across @NEARProtocol ecosystem. More details on the incident below.

🚨Community Alert: Ongoing exploit on @SweatEconomy on @NEARProtocol. Exploiter: 3be304b2151870b2be88b9de0b80acab921337ad152584138bd852fc6e9ae018 Largest exploit tx: DvrSMfY85Anc6AuLUmoEDkDdab7qX5NUZLu76HN8NoPn

🚨 RESOLVED: All user funds fully restored after @SweatEconomy exploit Here is how the SWEAT team, @MEXC, and the community stopped a $3.4M hack in its tracks 👇 WHAT HAPPENED? > The attacker discovered a bug in the $SWEAT token contract and deployed a custom drain smart contract > They successfully drained the top 100 SWEAT holder accounts and immediately attempted to liquidate the stolen funds via MEXC and Rhea Finance THE RESCUE > The SWEAT team instantly paused the SWEAT token contract to stop the bleeding before more accounts could be hit > MEXC acted swiftly to freeze the attacker's account, trapping the stolen funds before they could be offloaded > @rhea_finance paused SWEAT trading to cut off additional escape routes across the NEAR ecosystem > A patched SWEAT token contract was deployed, and all drained user balances were manually restored THE OUTCOME > ALL external account balances have been fully restored. Operations are back to normal. > SWEAT has temporarily closed its smart contracts from public view while conducting a comprehensive security audit to ensure no other vulnerabilities exist WHAT'S NEXT? > SWEAT is actively working with MEXC to process the recovery of the frozen stolen funds > The team will be filing an official incident report with law enforcement agencies to pursue the attacker > A detailed forensic analysis and full post-mortem will be released to the community soon

OUTCOME: ALL USER FUNDS ARE SAFE. $SWEAT AND SWEAT WALLET OPERATIONS ARE BACK TO NORMAL. BACKGROUND: Attacker discovered a bug in $SWEAT token contract and deployed drain smart contract on address "3be304b2151870b2be88b9de0b80acab921337ad152584138bd852fc6e9ae018". Attacker drained top 100 accounts of $SWEAT holders and attempted to liquidate stolen $SWEAT via @MEXC and @rhea_finance. IMMEDIATE ACTIONS TAKEN: - $SWEAT token contract paused - @MEXC froze the account of the attacker - @rhea_finance paused $SWEAT trading - Patched $SWEAT token contract deployed - All user funds are returned Next steps: - File incident report with law enforcement agencies - Work with @MEXC to recover frozen $SWEAT - Perform detailed forensic analysis and produce detailed post-mortem

OUTCOME: ALL USER FUNDS ARE SAFE. $SWEAT AND SWEAT WALLET OPERATIONS ARE BACK TO NORMAL. BACKGROUND: Attacker discovered a bug in $SWEAT token contract and deployed drain smart contract on address "3be304b2151870b2be88b9de0b80acab921337ad152584138bd852fc6e9ae018". Attacker drained top 100 accounts of $SWEAT holders and attempted to liquidate stolen $SWEAT via @MEXC and @rhea_finance. IMMEDIATE ACTIONS TAKEN: - $SWEAT token contract paused - @MEXC froze the account of the attacker - @rhea_finance paused $SWEAT trading - Patched $SWEAT token contract deployed - All user funds are returned Next steps: - File incident report with law enforcement agencies - Work with @MEXC to recover frozen $SWEAT - Perform detailed forensic analysis and produce detailed post-mortem