Umbrella Network Reward Pools on BNB Chain and Ethereum Drained, Hackers Profit $700,000

PeckShield tweeted that the Umbrella Network reward pools are drained at both BNB Chain and Ethereum, leading to the ~$700K gain for the hacker. The hack is possible because of an unchecked underflow in withdraw() so that anyone can withdraw any amount even without any balance. In the meantime, PeckShield reminded the Umbrella Network team to check out the StakingReward Contract on BNB Chain and Ethereum.