Foresight News 消息,慢雾首席信息安全官 23pds 发推表示,WOO X 曾于 6 月 30 日进行了 API v3 升级,其推测是 API 权限控制问题导致的越权漏洞。原因如下:是分多笔提币、能明确说 9 个恶意用户。“所以大概率是因为新旧 API 混用,权限控制或逻辑问题导致的漏洞,从而被恶意利用。”
Disclaimer: Investing carries risk. This is not financial advice. The above content should not be regarded as an offer, recommendation, or solicitation on acquiring or disposing of any financial products, any associated discussions, comments, or posts by author or other users should not be considered as such either. It is solely for general information purpose only, which does not consider your own investment objectives, financial situations or needs. TTM assumes no responsibility or warranty for the accuracy and completeness of the information, investors should do their own research and may seek professional advice before investing.