慢雾余弦：Balancer 超 1 亿美元被盗根本原因是Balancer v2 的 Composable Stable Pool 实现中，缩放因子计算误差可被低流动性兑换放大获利

2025-11-06 03:41:47

balancer balancer composable stable pool desk3 cryptocurrency desktop Crypto News

慢雾科技创始人余弦发布Balancer安全事件深度分析报告

报告揭示Balancer遭遇超1亿美元损失的根本原因：

在Balancer v2版本的Composable Stable Pool实现中

基于Curve StableSwap的Stable Math数学计算模型

对缩放因子(scalingFactors)的整数定点运算

存在关键性精度丢失漏洞

该漏洞导致在代币兑换过程中

产生微小但可复利式积累的价差与计算误差

攻击者通过精准利用低流动性池中的小额兑换

持续放大此计算误差

最终实现显著的累计套利利润

对投资者的影响：

1. 资金安全风险：直接造成用户资产损失

2. 协议信任危机：影响投资者对DeFi协议的信心

3. 流动性担忧：可能引发资金撤离潮

4. 监管关注：加速对DeFi领域的安全监管

5. 投资决策调整：投资者将更重视协议安全审计

Disclaimer:

1. The information provided does not constitute investment advice. Investors should make independent decisions and bear all risks themselves.

2. The copyright of this content belongs to the original author. The views expressed herein are solely those of the author and do not represent the stance or position of this website.

New Tab Page - Desk3 | Plugin

Stay ahead of the game in the cryptocurrency space.

Chainlink partners with SBI Digital Markets, the digital business unit of SBI Group in Japan

Slow Mist Cosine: The root cause of the theft of Balancer over 100 million dollars is that in the Composable Stable Pool implementation of Balancer v2, the calculation error of the scaling factor can be amplified by the low liquidity exchange

慢雾余弦：Balancer 超 1 亿美元被盗根本原因是Balancer v2 的 Composable Stable Pool 实现中，缩放因子计算误差可被低流动性兑换放大获利

7x24 Crypto Flash News

Hot News

Related Recommendations