Hedera discloses attack details: The attacker targeted the mainnet smart contract service code, transferring user tokens to their own account

ChainCatcher message, Hedera tweeted to disclose attack details, the attacker targeted the smart contract service code of the Hedera mainnet, transferring some Hedera Token Service tokens held by user accounts to their own accounts. The attacker aimed to use accounts as liquidity pools on multiple DEXs, which utilize contracts derived from Uniswap V2 to migrate and use Hedera Token Service, including Pangolin Hedera, SaucerSwap, and HeliSwap.

When the attacker moved the tokens obtained through the attack to the Hashport Network bridge, the bridge operator detected the activity and quickly took action to disable it. To prevent the attacker from stealing more tokens, Hedera shut down the mainnet proxy, which removed user access to the mainnet. The Hedera team has identified the root cause of the issue and is working on a solution. Once the solution is ready, Hedera council members will sign transactions to approve the deployment of updated code on the mainnet to eliminate this vulnerability, at which point the mainnet proxy will be reopened.

It is reported that the Hedera Token Service supports the configuration, management, and transfer of native fungible and non-fungible tokens on the public Hedera network. (source link)