BlockBeats 消息，4 月 21 日，KiloEx 于 4 月 21 日发布黑客事件根本原因分析报告。报告指出，事件起因是其智能合约中的 TrustedForwarder 合约继承了 OpenZeppelin 的 MinimalForwarderUpgradeable 却未重写 execute 方法，导致该函数可被任意调用。攻击发生于 4 月 14 日 18:52 至 19:40（UTC），攻击者在 opBNB、Base、BSC、Taiko、B2 和 Manta 等链部署恶意合约发起攻击。
KiloEx 与攻击者协商后，对方同意保留 10% 作为赏金，其余资产（涵盖 USDT、USDC、ETH、BNB、WBTC 和 DAI）已全部退还至项目方多签钱包。平台已完成漏洞修复并恢复运营（用户资产已100%归还）。
Disclaimer: Investing carries risk. This is not financial advice. The above content should not be regarded as an offer, recommendation, or solicitation on acquiring or disposing of any financial products, any associated discussions, comments, or posts by author or other users should not be considered as such either. It is solely for general information purpose only, which does not consider your own investment objectives, financial situations or needs. TTM assumes no responsibility or warranty for the accuracy and completeness of the information, investors should do their own research and may seek professional advice before investing.