
Fluid 奖励合约被攻破致约 21.5 万美元损失

ChainCatcher 消息,据 BlackHart 称,DeFi 项目 Fluid 在以太坊上的奖励发放机制遭利用,约 21.5 万美元资产被转走。Fluid 采用由一把钥匙发起、另一把钥匙批准的 Merkle 奖励名单机制,攻击者同时掌握两把运营私钥,提交仅向自身发放奖励的名单并批准,随后用空证明完成领取。
被盗资产来自三个奖励分发器,包括 112,883 枚 FLUID、47,903 枚 GHO 和少量 cbBTC,后被兑换为 ETH 并通过 Tornado Cash 转移。Fluid 借贷市场、金库、DEX 及用户存款未受影响,团队在约 10 小时内更换受损密钥并转移剩余奖励资金,但公开说明仅称奖励领取暂停更新,未提及私钥泄露与损失细节。
Disclaimer: OKX Orbit content is provided for informational purposes only. Learn more
Replies
Related Flash News
XBIT DEX: Ethereum price prediction Holds the $1,825 support level remains to be confirmed
BlackRock deposited 929 Bitcoins and 36,449 Ethereum to Coinbase
XBIT DEX: Main 24-hour ETH major traders' limit buy orders reached $613 million
BTC and ETH prices fall, XLM and HYPE rise: today's crypto market
CoinShares: Digital asset funds saw a net outflow of $1.67 billion in a single week, marking the second largest outflow of the year
Unitas Labs launched the yield-bearing gold asset xGLD, supported by Tether Gold (XAUt).
BNB's market capitalization has surpassed XRP, firmly holding the position of the fourth largest cryptocurrency
Maji Huang Licheng: Reduced ETH long positions to 1,000 coins
PeckShield: Total Losses from Crypto Hacks in May Reached $81.7 Million, Down 87.4% Month-on-Month
Ethereum once again approached the Maji liquidation price, prompting the latter to sharply reduce their holdings