ChainCatcher 消息，Enjin 的 ERC-1155 “Crypto Items” 允许每个物品通过专属物品适配器路由转账。攻击者注册并使用恶意转账适配器，跳过所有者批准检查，使其漏洞合约无需批准即可通过 transferFrom 从约 52 个无关持有者钱包提取 ENJ 支持的物品。
随后，攻击者对每个被盗物品调用 melt()，从平台储备金中兑换每个物品支持的 500 枚 ENJ。
ChainCatcher 消息，Enjin 的 ERC-1155 “Crypto Items” 允许每个物品通过专属物品适配器路由转账。攻击者注册并使用恶意转账适配器，跳过所有者批准检查，使其漏洞合约无需批准即可通过 transferFrom 从约 52 个无关持有者钱包提取 ENJ 支持的物品。
随后，攻击者对每个被盗物品调用 melt()，从平台储备金中兑换每个物品支持的 500 枚 ENJ。
Disclaimer: Investing carries risk. This is not financial advice. The above content should not be regarded as an offer, recommendation, or solicitation on acquiring or disposing of any financial products, any associated discussions, comments, or posts by author or other users should not be considered as such either. It is solely for general information purpose only, which does not consider your own investment objectives, financial situations or needs. TTM assumes no responsibility or warranty for the accuracy and completeness of the information, investors should do their own research and may seek professional advice before investing.