Slow Fog Cosine: GANA was stolen due to the leakage of the private key of the GANA Payment Stake contract owner

Slow Fog stated on the X platform that the theft of GANA was caused by the leakage of the owner private key of the GANA Payment Stake contract. The subsequent attack used some techniques, such as the utilization of 7702 delegate, which conveniently bypassed the onlyEOA check for unstaking. By changing the relevant Rate and Fee, the attacker was able to achieve the result of unstaking hundreds of USDT while only staking a few hundred USDT.