ASSET DRAINED - FP

[0xbhagi]

• Attacker: 0x625d271f634ee0804ccc573c4679aa3aee475b62
• AD Alert: https://app.forta.network/alerts/0xf2b02652b177275f2228e2d5c911ff30b4de989dddb87f4e3800cf1a804742a2
• Base bots: ASSET-DRAINED Bot.Ownership Transfer Bot and High Gas Use alerted

• Potential cause: base alert is FP ,0x625d271f634ee0804ccc573c4679aa3aee475b62 created contract 0xd791d0d3c499fa3c3b2b97e03c79c6a9f77b33db txn , bot was updated to exclude contract creators but here not excluded.

• Attacker: 0xf858174af68d22a2f6b0e8293dd0a104d97d0b20
• AD Alert: https://app.forta.network/alerts/0xcd1f3213362e7469511e313c2027b6f809da52660ea8174958a61ac050debb7b
• Potential cause: base alert is FP ,0xf858174af68d22a2f6b0e8293dd0a104d97d0b20 created contract by create2 0x760bd164B47cE33B436BF3B03391403C455f9138 txn , exclude create2 contract creators also.

[Vxatz]

Hey @0xbhagi, the bot was updated after those two alerts. It doesn't differentiate between CREATE and CREATE2, it just fetches the contract creator through an API call.