BonfireSwap suffers $50,000 loss due to access control vulnerability

The BonfireSwap router contract experienced a security breach resulting in approximately $50,000 in losses, affecting 41 users. According to SlowMist, the vulnerability stemmed from a missing access control check in the transfer function, which failed to verify the caller's authorization for the from address. Attackers exploited this to transfer tokens from users who had previously authorized the router. The affected contract address is 0x17e801e17cefc6334059189c178d4783830e03d3.