HypurrFi披露Aave V3早期版本“舍入误差”漏洞,已暂停XAUT0与UBTC市场新增借贷

AAVE-3,88%

PANews 3月6日消息,HyperEVM原生去托管借贷协议HypurrFi在X平台发文表示,Aave V3 3.5之前版本存在“舍入误差”漏洞,在特定条件下攻击者可通过反复执行供应/提取及借贷/偿还循环操作提取底层代币。受影响市场为HypurrFi Pooled中的XAUT0与UBTC。目前用户资金不存在风险,为确保安全相关市场已暂停新的供应与借贷操作,提现与还款功能仍可正常使用,其余市场运行正常。HypurrFi补充表示,已通过内部监控系统迅速在链上发现该问题并及时冻结受影响市场,同时正与其他Aave部署方及安全研究人员协作处理,并邀请其他Aave分叉项目联系以获取更多安全信息。

Disclaimer: The information on this page may come from third parties and does not represent the views or opinions of Gate. The content displayed on this page is for reference only and does not constitute any financial, investment, or legal advice. Gate does not guarantee the accuracy or completeness of the information and shall not be liable for any losses arising from the use of this information. Virtual asset investments carry high risks and are subject to significant price volatility. You may lose all of your invested principal. Please fully understand the relevant risks and make prudent decisions based on your own financial situation and risk tolerance. For details, please refer to Disclaimer.
Opmerking
0/400
Geen opmerkingen