An attacker used a publicly known test wallet key to bypass AlpsCon’s whitelist and exploit its staking rewards system. A $1.03M flash loan enabled the attacker to drain $355K in USDC rewards, netting $152K.
Transaction: 0x3d9df7d20d8296286383ffe475aa7b9e548946b2 (https://bscscan.com/address/0x3d9df7d20d8296286383ffe475aa7b9e548946b2)