Tornado Cash user hacks SuperRare staking contract, steals $730K in RARE

SlowMist claims the SuperRare exploit was caused by a faulty permission check in the “updateMerkleRoot function.”