Phalcon posted on X platform stating that their system detected that contract 0x8c2d4e (suspected to be a MEV bot) was attacked due to lack of access control, resulting in a loss of approximately $365,000. Specifically, the attacker first called function 0xac3994ec to designate themselves as a privileged address (possibly in the role of a debt owner); next, the attacker called function 0x1270d364 to obtain assets.