Home > Quick > Body

summer.fi协议被盗610万美元

clock
2026-07-06 08:53:41
summer.fi 旗下 Lazy Summer Protocol 遭到漏洞攻击,损失约 610 万美元。

据 Foresight News 报道,据 Onchain Lens 监测,攻击者通过闪电贷借入 6540 万枚 USDC 和 100 万枚 USDT,向 Fleet Commander 存入 6480 万枚 USDC 获取份额后,将 SiloVault 份额转入由 Silo Finance 管理的策略合约 Ark,绕过正常存款流程,将 Ark 余额从 0 膨胀至 714 万美元。

由于 Fleet Commander 直接信任 Ark 报告的原始余额来计算 totalAssets,攻击者赎回 7100 万枚 USDC,净获利约 610 万美元,全程在单笔交易中完成。

Onchain Lens 将此次事件定性为跨合约 ERC-4626 捐赠攻击,称根本原因在于 Fleet Commander 未使用内部验证机制,而是信任策略合约报告的余额。
Disclaimer:
1. The information provided does not constitute investment advice. Investors should make independent decisions and bear all risks themselves.
2. The copyright of this content belongs to the original author. The views expressed herein are solely those of the author and do not represent the stance or position of this website.
New Tab Page - Desk3 | Plugin
Stay ahead of the game in the cryptocurrency space.