Maestro is a Telegram bot that provides a set of cryptocurrency-related tools for Telegram users. According to PeckShield monitoring, Maestro's assets were stolen, with the attacker transferring the stolen 280 ETH to Railgun. These ETH were stolen through a contract vulnerability on Maestro.
In addition, an attacker exploited a vulnerability in Maestro to steal 37 million JOE tokens, even though there were only 26 million JOE tokens in the liquidity pool.
After fixing the vulnerabilities, Maestro posted an announcement on the X platform, stating that they have fully compensated the affected users. The specific measures included purchasing and returning tokens for 9 out of the 11 attacked tokens, costing a total of 276 ETH. For JOE and LMI tokens, due to insufficient liquidity, they couldn't repurchase the tokens in full. Instead, they decided to compensate the affected users with an equivalent amount of ETH, plus an additional 20%, costing a total of 334 ETH. The team has already issued full refunds, with a total expenditure of 610 ETH.