LayerZero CEO披露Across代币合约存在漏洞并给出解决方案

BlockBeatNews
ZRO-3,72%
ACX-0,88%
UMA2,46%

BlockBeats 消息,10 月 22 日,跨链互操作性协议 LayerZero 首席执行官 Bryan Pellegrino 在社交媒体致信 Across Protocol 团队表示,「我想通知你们,你们的代币合约存在一个关键问题。你们错误地暴露了一个原本应作为内部私有函数的功能,该功能是 Open Zeppelin 在其 ERC20 代币实现中编写的,旨在销毁代币,并将其给予了合约所有者——这使得你们可以随时随意从任何钱包中提取代币,任意地将任何账户的余额搞成 0。此外,你们的 Across Protocol 和 UMA Protocol 合约都有无限铸币的能力,但我已经通知你们这两个问题,而你们似乎并不在意。要解决这个问题而不需要重新发行代币:将合约所有权转移到一个新的智能合约,以防止铸币量超过总供应量,也不允许销毁。由于这是一个永久性漏洞,新合约必须是不可变的,并且不应包括任何转移所有权的功能。如果你们有一个活跃的漏洞悬赏计划,可以将此信息归功于 LayerZero 团队。」

Disclaimer: The information on this page may come from third parties and does not represent the views or opinions of Gate. The content displayed on this page is for reference only and does not constitute any financial, investment, or legal advice. Gate does not guarantee the accuracy or completeness of the information and shall not be liable for any losses arising from the use of this information. Virtual asset investments carry high risks and are subject to significant price volatility. You may lose all of your invested principal. Please fully understand the relevant risks and make prudent decisions based on your own financial situation and risk tolerance. For details, please refer to Disclaimer.
Opmerking
0/400
Geen opmerkingen