Cyvers Alerts: The attacker exploited the Venus core fund pool by updating the controller to a malicious contract address.

Jinse Finance reported that according to the latest alert from security monitoring platform Cyvers Alerts, a security incident has occurred on the Venus protocol on the BNB Chain, putting approximately $27 million in assets at risk. According to the report, the Venus core pool controller was tampered with and replaced by a malicious contract address, after which the address withdrew assets worth $27 million, including multiple tokens such as vUSDC and vETH.