A security incident occurred on the SEI chain. On January 9th, an attacker exploited a vulnerability in the Synnax contract to launch a flash loan attack, borrowing 1.96 million WSEI in a single transaction without repayment. The trigger point of this attack is interesting — three blocks earlier, an address (0x9748…a714) accidentally transferred funds to the contract due to a misoperation, inadvertently providing the attacker with a "tool".

From the on-chain transactions, this attack involved the coordination of two key transactions (TX1 and TX2), and the method was not complex. However, this incident reveals an easily overlooked DeFi risk — on-chain misoperations can sometimes become the breakthrough point for attacks. Users should double-check addresses before transferring, and exchanges and projects should strengthen contract security audits to prevent low-level mistakes from becoming major vulnerabilities.