Security Team: The FlashLoanProvider contract of Equalizer Finance is incompatible with the Vault contract, leading to flash loan attacks

星球日报讯 据慢雾区消息,6月7日,Equalizer Finance遭受闪电贷攻击。慢雾安全团队将攻击原理分享如下: 1. Equalizer Finance存在FlashLoanProvider与Vault合约,FlashLoanProvider合约提供闪电贷服务,用户通过调用flashLoan函数即可通过FlashLoanProvider合约从Vault合约中借取资金,Vault合约的资金来源于用户提供的流动性。 2. 用户可以通过Vault合约的provideLiquidity/removeLiquidity函数进行流动性提供/移除,流动性提供获得的凭证与流动性移除获得的资金都受Vault合约中的流动性余额与流动性凭证总供应量的比值影响。 3. 以WBNB Vault为例攻击者首先从PancekeSwap闪电贷借出WBNB 4. 通过FlashLoanProvider合约进行二次WBNB闪电贷操作,FlashLoanProvider会先将WBNB Vault合约中WBNB流动性转给攻击者,随后进行闪电贷回调。 5. 攻击者在二次闪电贷回调中,向WBNB Vault提供流动性,由于此时WBNB Vault中的流动性已经借出一部分给攻击者,因此流动性余额少于预期,则攻击者所能获取的流动性凭证将多于预期。 6. 攻击者先归还二次闪电贷,然后从WBNB Vault中移除流动性,此时由于WBNB Vault中的流动性已恢复正常,因此攻击者使用添加流动性获得凭证所取出的流动性数量将多于预期。 7. 攻击者通过以上方式攻击了在各个链上的Vault合约,耗尽了Equalizer Finance的流动性。 此次攻击的主要原因在于Equalizer Finance协议的FlashLoanProvider合约与Vault合约不兼容。
最热快讯
Trump: A decision on Iran will be made soon
Odaily: U.S. President Trump stated that we will make a decision on Iran very soon, the Houthis' actions are very bad, and he has already spoken with the Saudi Crown Prince. (Jinshi)
Interactive Brokers Launches Ethereum Staking Service Powered by ZeroHash
Odaily News: According to market reports, Interactive Brokers has launched an Ethereum staking service powered by ZeroHash.
CME CEO Questions CFTC's Authority Over Prediction Markets, Says Dispute May Reach Supreme Court
Odaily News: CME Group CEO Terrence Duffy stated that the U.S. Commodity Futures Trading Commission's (CFTC) attempt to expand its regulatory authority over prediction markets is "a bit of a stretch," and that the related regulatory dispute could ultimately reach the U.S. Supreme Court.Speaking at the DC Fintech Week event on Tuesday, Duffy said the battle over prediction market regulation could evolve into a legal showdown among state governments, tribal governments, and the federal government. "This is going to the Supreme Court, and I think the states and the tribes will prevail," he said. (The Block)
Trader Killa: Bitcoin's Short-Term Choppy Action May Be a "Liquidation Game," Next Key Level to Watch Is $75,500
Odaily reports: Trader Killa says that for Bitcoin (BTC) to replicate its 2023 price action, it needs to form a higher low (HL) above $75,500 and ideally hold the low near $80,000.After Bitcoin recently reclaimed its short-term structure around the $82,000 zone, it pulled back to test and broke through again, with short-term price action showing strong characteristics of "bull traps and bear traps." When BTC previously fell from $84,100 to $81,000, the structure appeared weak, but a large number of shorts entering at the lows fueled the subsequent rebound.Killa noted that during the drop from $84,100 to $81,000, long liquidations totaled approximately $300 million, while during the earlier decline from $86,800 to $80,600, long liquidations exceeded $2 billion, indicating that the market's leverage structure is improving and the proportion of longs has declined compared to before. The market now needs to form a higher low and initiate the next leg up; otherwise, this correction could break below $80,000.
US mega-cap cloud providers rally collectively, Microsoft stock hits another record high
Odaily reports that according to MSX.COM data, US mega-cap cloud providers including Microsoft and Google rallied collectively. Google-A shares rose 1.07% to $356.510 per share, with a total market capitalization of $4.36 trillion.Microsoft shares rose 1.6% to $549.795 per share, hitting another record high, with a total market capitalization of $4.08 trillion. Amazon shares rose 0.93% to $261.950 per share, with a total market capitalization of $2.83 trillion.
Apple's total market cap reaches $5.06 trillion, setting a new all-time high
According to MSX.COM data, Apple's stock price rose 1.74% in early trading to $346.892 per share, with a total market cap of $5.06 trillion, setting a new all-time high.
资讯热榜
日榜
周榜
BTC breaks through 84,000 USDT, 24H gain 0.01%
South Korean stock index plunges, exchange activates sidecar mechanism for KOSPI index
US media: OpenAI reportedly plans to "revive" Sora
Binance Pool and related services will be discontinued on November 10, 2026
Macquarie: Accelerating US September CPI Unlikely to Prompt a Fed Rate Hike in October
Korean stocks close down 5.4%, SK Hynix plunges 10%
KB Securities: South Korean Chip Stocks Pullback May Reflect Investors' Doubts About Earnings Sustainability
South Korea's KOSPI index extends decline to over 4%
Meta releases Muse Wonder series, claiming superior performance to comparable models from Anthropic and OpenAI
British High Court Rules Chinese Law Applies to Bitcoin Claims in Qian Zhimin Case, Victims May Miss Out on Massive Appreciation