CertiK: The Rebalancer contract on the Base chain was attacked by a reentrancy attack, resulting in a loss of more than $500,000

On December 10th, CertiK's alarm system detected a vulnerability exploit attack on the Rebalancer contract on the Base chain. The attacker profited 133.7 ETH, equivalent to approximately $501,000 USD, through a reentrancy vulnerability. Analysis shows that the root cause of the vulnerability is that the open() function of the contract allows for the input of any pool.strategy contract address. The attacker exploited this feature to input the attack contract and, when calling the burn function, performed a reentrancy operation, thereby obtaining an additional 50% of ETH.