BlockSec Phalcon:本次 Balancer 黑客攻击手法高度复杂

GateNews
BPT7,5%

Foresight News 消息,据 BlockSec Phalcon 监测,数个基于 Balancer 的项目在几小时前遭遇攻击,导致损失超过 1.2 亿美元。这是一种高度复杂的攻击手法。初步分析显示,攻击的根本原因是通过不变式操控扭曲了 BPT 价格计算,使攻击者能够通过一次批量交换在特定的稳定池中获利。以 Arbitrum 上的一次攻击交易为例,批量交换操作可以分为三个阶段:1、攻击者将 BPT 交换为基础资产,以精确调整一种代币(cbETH)的余额至舍入边界的边缘(数量 = 9),为下一步的精度损失奠定条件。2、然后攻击者使用特定的数量(=8)在另一种基础资产(wstETH)和 cbETH 之间进行交换。由于在缩放代币数量时向下舍入,计算得出的 Δx 略微减少(从 8.918 降至 8),导致 Δy 被低估,从而使不变式(Curve 的 StableSwap 模型中的 D)变小。由于 BPT 价格 = D / totalSupply,因此 BPT 价格被人为压低。3、攻击者将基础资产反向交换回 BPT,恢复余额的同时从被压低的 BPT 价格中获利。

Disclaimer: The information on this page may come from third parties and does not represent the views or opinions of Gate. The content displayed on this page is for reference only and does not constitute any financial, investment, or legal advice. Gate does not guarantee the accuracy or completeness of the information and shall not be liable for any losses arising from the use of this information. Virtual asset investments carry high risks and are subject to significant price volatility. You may lose all of your invested principal. Please fully understand the relevant risks and make prudent decisions based on your own financial situation and risk tolerance. For details, please refer to Disclaimer.
Commento
0/400
Nessun commento