CertiK: Dough was attacked due to arbitrary call vulnerability in the contract, and the white hat hacker returned 76 ETH

Security agency CertiK has released a vulnerability report on Dough Finance. The report shows that Dough Finance was exploited in multiple flash loan transactions on July 12th, resulting in hackers profiting approximately $2.1 million, of which about 76 ETH (approximately $260,000) has been returned by white hat hackers. Attackers exploited an arbitrary call vulnerability in the Dough ConnectorDeleverageParaswap contract, allowing them to directly transfer WETH from the vulnerable contract.