BlockBeats news, September 18 - According to Defimon Alerts monitoring, Nimiq's swap contract on Polygon was exploited for approximately $50,400 on September 16. The reason is that the contract simultaneously served as OpenGSN's paymaster and forwarder, and execute() did not verify user signatures. The attacker set up their own relay, forged an open() request from a liquidity wallet, used a precomputed hash lock to open the HTLC and immediately redeemed it, then transferred the wallet's USDC, USDT0, and USDC.e. Nimiq had previously suspended Gas Abstraction stablecoin transactions and was investigating related issues.

