The Amps exploit was due to an unprotected reinitializer on their upgradeable contract. The attacker called reinitialize, set themselves as the owner, and changed the implementation to a malicious contract. This is a very common bug in upgradeable contracts. (1/5)

https://farcaster.xyz/phil/0x1aa4e6f9

it is such a simple exploit

i'm upset it wasn't me who exploited it

cto @ bwl.gg, 100M+ users (bdut.ch) 🙏 $eggs is life

Bro literally watched someone walk into an open vault and just went “damn, wish it was me” 😭