Another security incident has occurred on the SEI chain. On January 9th, an attacker exploited a vulnerability in the Synnax contract to launch a flash loan attack, borrowing 1.96 million WSEI tokens in a single transaction and not repaying. The trigger for this attack is quite interesting—three blocks prior, an address (0x9748…a714) accidentally transferred funds to the contract due to a misoperation, inadvertently providing the attacker with a "tool."

From on-chain transaction analysis, this attack involved the coordination of two key transactions (TX1 and TX2), and the method was not complicated. However, this incident highlights a often-overlooked DeFi risk—on-chain misoperations can sometimes become the breach point for attacks. Users should double-check addresses before transferring funds, and exchanges and project teams should strengthen contract security audits to prevent basic mistakes from turning into major vulnerabilities.