Level Finance’s “LevelReferralControllerV2” smart contract featured a fault that allowed for “repeated referral claims” from the same period,to blockchain security startup Peckshield. The exchange also verified this in a later statement on Discord.
The v2 controller contract has received multiple calls to the “claim multiple” function within the last 48 hours,As of now, the contract’s implementation does not appear to have changed after the attack. However, Level Finance stated that it would release a fresh implementation of the referral contract within the following 12 hours.According to DeDotFiSecurity, the team has temporarily shut down the referral program, effectively ending the attack.