Asterix Attack Shares Similarities with Flooring Protocol and BMP Vulnerabilities

ChainCatcher report: Yu Xian, founder of SlowMist, posted that the attack on Asterix is similar to yesterday’s attacks on Flooring Protocol and BMP (underlying protocols DN404 and BT404, respectively), involving overflow and reuse due to高位 NFT ID shifting. It appears the attacker is seeking common vulnerabilities. It is reported that Asterix disclosed an attack yesterday affecting its ASTX token contract, stating that its Uniswap v4 liquidity pool was compromised on June 8. The attacker stole approximately 30 ETH through 242 transactions. The vulnerability stemmed from the early version of DN404 lacking proper validation checks on token ID approvals during approval operations. The attacker exploited outdated token approvals to repeatedly sell tokens within the pool for ETH, then used forged IDs to withdraw equivalent token amounts, creating a cycle that eventually drained all funds. As smart contracts are immutable and cannot be patched, the team advises users to cease all interactions with the current pool and token, and is planning a migration to a secure token deployment. The team suspects the attacker used a jailbroken AI tool to perform fuzz testing and uncover non-standard logic paths.