Request Finance Releases Attack Incident Report

According to Jinse Finance, the integrated financial platform Request Finance has released an incident report on the recent attack, stating that only one user was affected. On September 10, the attacker breached the Request Finance frontend system and injected an authorization command into a contract that appeared almost identical (in name, address, partial ABI interface, and recent activity). When the victim made a payment, they not only transferred funds to the legitimate contract but also authorized the malicious contract to have unlimited access to spend their USDC. The team has since implemented additional protective mechanisms and monitoring measures.