Algo-Tinyman Liquidity Hack
-- At the start of the new year Tinyman was hacked for approximately $3 million worth of liquidity(at the time of the attack). -- The wallet that initiated the hack was RJROFHHDTCMDRCPYSBKN2ATSKZAPOPEV3KWR3IQEOIZMMZCPMMCEUTXGG4 -- (https://algoexplorer.io/address/RJROFHHDTCMDRCPYSBKN2ATSKZAPOPEV3KWR3IQEOIZMMZCPMMCEUTXGG4). -- Payout 97.09 ALGO -- Grand Prize 291.27 ALGO -- Level Intermediate -- The wallet was able to take advantage of a flaw in the goBTC(Asset_id: 386192725) and goETH(Asset_id: 386195940) pools on Tinyman, -- where when they burned their liquidity pair, they were able to receive exclusively goETH or goBTC instead of goETH/goBTC and ALGO. -- Here is the transaction Group ID of the first instance of the attack, KbOlFc02lRAonvc4yfgpI/fkNrlP2FDHGX1ESAF2lvs= -- (https://algoexplorer.io/tx/group/KbOlFc02lRAonvc4yfgpI%2FfkNrlP2FDHGX1ESAF2lvs%3D). -- Unfortunately, when others found out about this vulnerability they took advantage of it as well. -- Show how much goETH and goBTC stolen by each wallet that took advantage of this flaw. -- How much of the stolen goETH and goBTC has been swapped for other assets? -- What assets have the goETH and goBTC swapped for? -- How much of each asset has been swapped for the stolen goETH and goBTC?