FN - Radiant capital exploit

forta-network / starter-kits

MIT License

64 stars 38 forks source link

FN - Radiant capital exploit #466

Open Ivan1905 opened 7 months ago

Ivan1905 commented 7 months ago

In this opportunity seems like the attack detector missed the radiant exploit as the contract creation was labeled as safe.

exploiter address (arbitrum): 0x826D5F4d8084980366f975e10db6C4Cf1f9dDE6D
Alert here

Vxatz commented 7 months ago

This could be assigned to @salort-forta as it concerns the ML bot.

salort-forta commented 7 months ago

Current model [in beta] would have triggered a malicious smart contract (prediction = 0.5642 > 0.53 threshold). Probably AD would have taken a bit more because there was no funding alert that I can see

Thisisgeorg3 commented 7 months ago

@salort-forta - check funding source

salort-forta commented 7 months ago

It was funded through Stargate finance, which I think we don't have coverage

Vxatz commented 6 months ago

@Thisisgeorg3 Is Stargate a common funding source of suspicious activities? Should we add coverage?

Ivan1905 commented 6 months ago

@Vxatz stargate indeed is kind of a bridge. Address was funded in union chain on mainnet https://etherscan.io/address/0x826D5F4d8084980366f975e10db6C4Cf1f9dDE6D