Revenue Family exploited in permit phishing attack, USDG drained to two hacker addresses

TREE NEWS reports: The project Revenue Family, which bills itself as X Money’s off-ramp bridge, has been tied to a malicious approval exploit in which an attacker lured users into signing permit authorizations, obtained unlimited USDG allowances and called transferFrom in the same transaction to move funds out. Stolen funds were split 80/20 into two hacker addresses. The project said on October 1 that its social media accounts had been taken over by an internal reviewer, paused redemptions and denied that REV was its official token.