Case period: 2024-01-22. This article is a retrospective review.
The historical incident
CertiK's 23 January 2024 analysis examines the Concentric.fi incident of the previous day. The report relays the project's account of a social-engineering attack against an administrator and describes the transfer of control and malicious changes to vault logic. Its transaction analysis traces activity involving vault assets and existing user approvals.
Why old approvals were relevant
An allowance is permission for a contract address to spend specified tokens. When a system permits upgrades, the behavior associated with that address can change without the user issuing a fresh allowance. This is a different risk from a fraudulent website merely copying the name of a legitimate service.
What to review after an advisory
Check the official affected-contract list, the chain and the permissions your account actually granted. Record any protective transaction and verify its confirmed result; a submitted request is not yet a completed revocation. Avoid treating every upgradeable contract as malicious, but include upgrade control in the trust assumptions you consider. This retrospective is based on CertiK's analysis and the project statements it cites. Wallet Beep has not independently reproduced the exploit or verified a complete loss total.
Source and review date
CertiK — original source. Source published: 2024-01-23. Source checked: 2026-10-23.
This is an original Wallet Beep editorial summary. Consult the linked source for its full context and any later updates.