PeckShield:Dolomite Exchange旧合约遭受攻击,损失约200万美元

This article is not available in the current language yet. Showing the original version.

PANews 321日消息,PeckShield监测显示,Dolomite Exchange的旧合约遭受攻击,导致约200万美元的损失。攻击者将盗取的USDC代币换成了大约541.5个以太坊(ETH),价值约190万美元,以及94,000个DAI代币。

据Beosin Trace分析,ETH链上Dolomite Exchange的合约受到授权攻击,造成约190万美元的损失。原因是黑客利用其TradeDelegate合约的batchTransfer函数,将用户授权到这个合约的代币盗取。batchTransfer函数对调用者做了限制,必须是经过授权的地址才能调用,而授权的地址为一个合约,该合约的submitRingsThroughDyDx函数将可以调用到TradeDelegate合约的batchTransfer函数,导致大量用户的代币被黑客通过transferfrom转走。目前,TradeDelegate合约已取消对上述合约的授权。

Share to:

Author: PA一线

This content is for market information only and is not investment advice.

Follow PANews official accounts, navigate bull and bear markets together
PANews APP
All three major U.S. stock indexes closed higher, with HOOD rising over 5.29%.
PANews Newsflash