Security firm CertiK recently detected a contract risk incident. On January 20th, 193 suspicious transactions related to the unverified contract of SynapLogic appeared, attracting considerable attention.

The method of this attack is not exactly new — attackers used the DeFi tool flash loans to carry out the attack. How exactly did they operate? They repeatedly called contract functions, borrowing 1 ETH from the protocol at once, and used it to mint 16,000 SYP tokens within just a few blocks. After achieving their goal, the attacker simply repaid the ETH, completing the process cleanly and efficiently.

What's even more interesting is that this attack did not originate from a single fixed wallet address but was launched from multiple newly created addresses. This indicates that the attacker is attempting to obfuscate and evade tracking. Such tactics have become increasingly common in recent contract vulnerability incidents, highlighting the need for heightened security awareness. If you hold related tokens or are using this protocol, you may want to pay attention to subsequent official statements.