CertiK: The Base chain's Rebalancer contract was hit by a re-entry attack, with losses exceeding $500,000

On December 10, the CertiK alert system detected a vulnerability exploitation attack on the Rebalancer contract on the Base chain. The attacker profited 133.7 ETH, approximately $501,000 USD, through a re-entry vulnerability. According to analysis, the root cause of this vulnerability is that the open() function in the contract allows any pool.strategy contract address to be entered. The attacker exploited this feature by inputting an attack contract and performed a re-entry operation when calling the burn function, thereby obtaining an additional 50% of ETH.