Lien 遭攻击损失54.2万美元
2026-07-24 07:34:00
据慢雾监测，Lien 遭受攻击，损失约 54.2 万美元资金。据 Foresight News 报道，根本原因为 BondMakerCollateralizedEth 中的 `exchangeEquivalentBonds` 函数缺少适当的多重集完整性检查。它仅统计总异常发生次数，而非验证每个 bondID 在组中的出现次数。通过在输出组中重复单个异常 bondID，攻击者将异常计数消耗了两次，掩盖了缺少的输入异常。这允许铸造新的非异常 BondTokens，而无需销毁相应的输入债券，这些债券随后从预授权的受害者地址出售以换取 USDC。
Disclaimer:
1. The information provided does not constitute investment advice. Investors should make independent decisions and bear all risks themselves.
2. The copyright of this content belongs to the original author. The views expressed herein are solely those of the author and do not represent the stance or position of this website.
