BlockSec:BSC 链 MT 代币买入限制机制存在缺陷,黑客套利约 24.2 万美元

链捕手
9 hours ago

ChainCatcher 消息,据 BlockSec 监测,其系统在 BSC 检测到一笔针对 MT-WBNB 资金池的可疑交易,预估损失约 24.2 万美元。原因在于买方限制机制存在缺陷:在通缩模式下,正常买入操作会回退,而路由器 / 交易对则被列入白名单,这使得攻击者可以通过路由器互换和流动性移除绕过限制,从该交易对获取 MT。

攻击者随后出售 MT 以积累 pendingBurnAmount,并调用 distributeFees()直接从交易对中销毁 MT,人为拉高价格,然后再将 MT 兑换回 WBNB 以获利。此外,一条允许前 0.2 MT 转账绕过买家限制的推荐规则,使得攻击者能够启动攻击。

Disclaimer: Investing carries risk. This is not financial advice. The above content should not be regarded as an offer, recommendation, or solicitation on acquiring or disposing of any financial products, any associated discussions, comments, or posts by author or other users should not be considered as such either. It is solely for general information purpose only, which does not consider your own investment objectives, financial situations or needs. TTM assumes no responsibility or warranty for the accuracy and completeness of the information, investors should do their own research and may seek professional advice before investing.

Most Discussed

  1. 1
     
     
     
     
  2. 2
     
     
     
     
  3. 3
     
     
     
     
  4. 4
     
     
     
     
  5. 5
     
     
     
     
  6. 6
     
     
     
     
  7. 7
     
     
     
     
  8. 8
     
     
     
     
  9. 9
     
     
     
     
  10. 10