DeFi fixed interest rate generation protocol 88mph released a report on the repair of serious vulnerabilities in the "init()" function
2021-06-15 02:21
官方消息,DeFi固定利率生成协议88mph发布“init()”函数严重漏洞的修复报告。此前iosiro的安全研究员白帽Ashiq Amien向智能合约漏洞赏金平台Immunefi披露88mph的CRV:RENWBTC、CRV:STETH 和 yaLink 池中发现严重漏洞,该漏洞是一个未受保护「init()」函数,这些特定池的代码功能将允许恶意用户窃取 650 万美元的代币,主要是 crvRenWBTC。该 init() 函数是用来初始化88mph平台的NFT合约,init() 函数不受保护并且可以被任何人多次调用 ,此漏洞允许恶意攻击者访问任何用户的NFT和存款。在 Immunefi 披露该漏洞后,88mph 暂停了受影响的合约,并将用户资金归还给合格的所有者。88mph表示很快就会部署其 V3 平台,这将废除受影响的合约,所以不需要立即修复。意识到该漏洞的潜在破坏性影响,88mph应白帽公司的要求,向 iosiro 颁发了 42069 美元的赏金。
最热快讯
资讯热榜
日榜
周榜
Baird: Tesla rating downgraded to neutral, Musk's relationship with Trump adds uncertainty
币安将停止支持FIS、MDT代币充提业务
Binance: At least 236 Alpha Points can claim 800 SKATE tokens airdrop when trading opens
The first meeting of the China-US economic and trade consultation mechanism is being held in the UK
Matrixport: Wall Street funds poured into crypto stocks, but the crypto market did not strengthen synchronously
币安将上线HOME永续合约及Alpha交易