According to CoinMeta, on September 20th, a contract was attacked. The attackers extracted 8,721,530 Ether from tokenconversionmanagerv3 and illegally minted 408,532,878 $NTX, resulting in a loss of approximately 2 million US dollars. The root cause was the leakage of the conversion-authorizer private key, as well as the fact that the conversionin() function did not have a hard cap and no proof of counterparty locking/destruction. The contract operated as designed, verified valid ECDSA signatures, and then transferred all FET in the bridge to the attackers. The attacker's address is 0x1572f2af7696b39c85e3221cde8efb640f86c362, and the contracts involved were 0xab424a430cc09864fa1277a38193111705adf3a3 and 0xf0d33beda4d734c72684b5f9abbebf715d0a7935.