[NovaBox Reward Pool Recently Attacked, Hacker Exploits Allocation Mechanism Vulnerability to Steal 56.73 ETH] According to Bits.media, the reward pool of the NovaBox platform was attacked on June 9 on Ethereum, resulting in a loss of approximately 56.73 ETH, affecting over 130 deposit users. The attacker drained the pool's funds from 65.11 ETH to 0.09 ETH in a single transaction, accounting for about 99.86%. Security firm F12 stated that the incident did not stem from a smart contract vulnerability but rather a flaw in the reward allocation mechanism. The attacker utilized a flash loan of 427.5 WETH from Aave V3, exploiting a vulnerability in NovaBox's mechanism where dividends are distributed before balances are updated during user deposits and withdrawals.