Unleash Protocol suffers internal governance privilege abuse, resulting in $3.9 million in assets stolen

PANews, December 30 — According to an official announcement, the Unleash Protocol project deployed on Story Protocol suffered an unauthorized contract upgrade today, resulting in the malicious transfer of user assets. The attacker manipulated its multi-signature governance privileges to carry out the upgrade, leading to the theft and cross-chain transfer of assets such as WIP, USDC, WETH, stIP, and vIP to external addresses. The confirmed loss currently stands at approximately $3.9 million. Unleash has suspended all operations and initiated a comprehensive investigation and audit process, urging users not to interact with its contracts for the time being. Story Protocol itself was not affected.