慢雾:一未验证合约存在低级调用漏洞,导致 16.6 枚 WETH 被盗

链捕手
Aug 01

ChainCatcher 消息,慢雾安全团队发布警报,一个未验证合约因选择器 0x42be3129 暴露不受限制的低级调用漏洞,缺乏访问控制和目标数据验证,导致约 16.6 枚 WETH 被盗。

攻击者利用合约现有 ERC20 授权额度,绕过所有者检查执行未经授权的 transferFrom 操作。

Disclaimer: Investing carries risk. This is not financial advice. The above content should not be regarded as an offer, recommendation, or solicitation on acquiring or disposing of any financial products, any associated discussions, comments, or posts by author or other users should not be considered as such either. It is solely for general information purpose only, which does not consider your own investment objectives, financial situations or needs. TTM assumes no responsibility or warranty for the accuracy and completeness of the information, investors should do their own research and may seek professional advice before investing.

Most Discussed

  1. 1
     
     
     
     
  2. 2
     
     
     
     
  3. 3
     
     
     
     
  4. 4
     
     
     
     
  5. 5
     
     
     
     
  6. 6
     
     
     
     
  7. 7
     
     
     
     
  8. 8
     
     
     
     
  9. 9
     
     
     
     
  10. 10