Beosin发布Dexible攻击事件分析,提醒用户取消对相关地址的代币授权

This article is not available in the current language yet. Showing the original version.

PANews 2月17日消息,区块链安全审计公司Beosin对Dexible事件进行了分析,称Dexible合约selfSwap函数存在逻辑漏洞,会调用其中的fill函数,该函数存在一个调用攻击者自定义的data,而攻击者在此data中构造了一个transferfrom函数,并将其他用户(0x58f5f0684c381fcfc203d77b2bba468ebb29b098)的地址和自己的攻击地址(0x684083f312ac50f538cc4b634d85a2feafaab77a)传入,导致该用户授权给该合约的代币被攻击者转走。

Beosin提醒用户:取消对0xde62e1b0edaa55aac5ffbe21984d321706418024地址的代币授权,防止被盗。

此前今日早些时候消息,Dexible项目疑似遭遇攻击,损失约153万美元

Share to:

Author: PA一线

This content is for market information only and is not investment advice.

Follow PANews official accounts, navigate bull and bear markets together
PANews APP
BTC broke through $78,000, with a daily increase of 0.96%.
PANews Newsflash