Legacy Escrow Contract Hacked for $1.7M via Integer Overflow Bug

Notional Finance's legacy escrow contract was drained of $1.73 million by an attacker exploiting a coding flaw on Friday.

The exploit occurred when the contract, which is used for fixed-rate lending on Ethereum, registered an enormous fabricated debt as zero due to an integer overflow bug.

The stolen funds, consisting of DAI and USDC, were then laundered through Tornado Cash before being transferred out of the escrow account.

Etherscan records show that the setup was established at 11:58 p.m. UTC on Thursday, with the withdrawal occurring just three minutes later.