🚨SlowMist TI Alert🚨 💸 @SetProtocol Loss: ～9.6K USD 🔍 Root Cause: Index Coop `ExchangeIssuance.issueSetForExactToken` trusted arbitrary SetToken state without locking. The function read components and units for quoting, but allowed a malicious manager pre-issue hook to inflate `positionMultiplier` via NAV `issue`/`redeem` with a fake valuation. `BasicIssuanceModule.issue` then read inflated real units from `ExchangeIssuance` via `transferFrom`, causing TOCTOU-based asset drain. 📌 Attacker: 0x0736930ae35eafefa789f11edf41d7b799e7c99d 📌 Victim: 0xc8c85a3b4d03fb3451e7248ff94f780c92f884fd (ExchangeIssuance) 📌 Malicious SetToken: 0xf7c2d0a2bf81bf803ed6e1d97c89fe3b30b06948 📌 Malicious Manager/Hook: 0x8f449d85f728c1dd6596880ba28a0b80b6a26c58 📌 Malicious Valuer: 0x388a3da33825e1f44ac71b8fd543523cdf994802 ⚠️ Impact: ExchangeIssuance lost real assets after attacker issued BHSET with 0.05 WETH, then abused hook to inflate component units ~93.66x, allowing excessive `transferFrom` during issue. Powered by http://SlowMist.AI Tx: https://etherscan.io/tx/0x7f45428df558fba1d19ab115effef8ecd1e6e05b491f02202b0815e47b8d658b(SlowMist)