BlockSec Phalcon has reported a suspected attack on Ethereum contracts, resulting in a loss of approximately $120,000. The alert, issued on October 15, 2025, highlights suspicious transactions targeting two unknown contracts deployed at the same address. The transactions were initiated by different externally owned accounts (EOAs). The attack exploited vulnerabilities in the approveERC20 and withdrawAll functions of the non-open-source contracts, which lacked proper access controls. The attacker utilized a flash loan to acquire #sil tokens, performed multiple token swaps, and executed the exploit by draining the tokens through the withdrawAll function, which required burning the #sil tokens.