ChainCatcher 消息，据市场消息，BSC 链上一个未知的 USDC-OCA 流动性池遭攻击，导致约 42.2 万枚 USDC 被提取。
攻击者利用了 OCA 代币的通缩性 sellOCA() 逻辑漏洞，每次调用在 swap OCA 代币的同时，从流动性池中移除等量的 OCA，人为抬高了池内代币价格。攻击通过三笔交易完成：第一笔执行攻击操作，后两笔主要用于支付额外的区块构建者贿赂。攻击者向 48club-puissant-builder 支付了总计约 43 枚 BNB 加 69 枚 BNB，最终获利估计约为 34 万美元。同一区块中的另一笔交易在 position 52 处失败，疑似被攻击者抢先交易。
Disclaimer: Investing carries risk. This is not financial advice. The above content should not be regarded as an offer, recommendation, or solicitation on acquiring or disposing of any financial products, any associated discussions, comments, or posts by author or other users should not be considered as such either. It is solely for general information purpose only, which does not consider your own investment objectives, financial situations or needs. TTM assumes no responsibility or warranty for the accuracy and completeness of the information, investors should do their own research and may seek professional advice before investing.