分析:MooCakeCTX攻击事件源于合约在未结算之前奖励的情况下进行复投

This article is not available in the current language yet. Showing the original version.

PANews 11月7日消息,对于今日MooCakeCTX项目遭受的闪电贷攻击,Fairyproof分析称,疑似原因为该合约在用户质押前(depositAll函数)未结算奖励的情况下进行了复投(未调用‘earn’函数),即在用户质押时,合约没有对以前的奖励进行结算并进行新的投资。这会导致用户在质押后就马上能获取以前的质押分红。攻击者在同一个区块内使用闪电贷借出 50000个cake代币后,连续两次进行质押,然后再提取质押的cake代币,归还后获利。

此前今日早些时候消息,MooCakeCTX项目遭受闪电贷攻击,攻击者获利143921美元

Share to:

Author: PA一线

This content is for market information only and is not investment advice.

Follow PANews official accounts, navigate bull and bear markets together
PANews APP
MILC Media Metaverse suffered a key breach incident on its cross-chain bridges on BNB and Ethereum, resulting in a loss of approximately $160,000.
PANews Newsflash