Technical Insights on Balancer Theft Incident

According to Odaily, in response to the technical details surrounding the Balancer theft incident, kebabsec auditor and citrea developer @okkothejawa shared insights on the X platform. They stated that the error mentioned by @moo9000 might not be the root cause, as in all 'manageUserBalance' calls, ops.sender equals msg.sender. The security vulnerability may have occurred in the transaction preceding the creation of the contract for asset extraction, as it led to some state changes in the Balancer vault.