慢雾:Aave V3 Loop Safe Module 漏洞导致约 114.09 枚 ETH 被盗

链捕手
Oct 02

ChainCatcher 消息,慢雾发布安全警报称,Aave V3 Loop Safe Module 出现安全漏洞,攻击者通过伪造 Safe 身份验证并利用任意 Module 执行,从两个 Safe 多签钱包中窃取约 114.09 ETH。

攻击者通过伪造始终返回真值的 Safe 绕过认证,并利用可任意控制的 router 和 calldata 执行模块交易,转移 weETH 及 Aave 抵押品。攻击者偿还约 1300 枚 WETH 债务后解锁抵押品。

Disclaimer: Investing carries risk. This is not financial advice. The above content should not be regarded as an offer, recommendation, or solicitation on acquiring or disposing of any financial products, any associated discussions, comments, or posts by author or other users should not be considered as such either. It is solely for general information purpose only, which does not consider your own investment objectives, financial situations or needs. TTM assumes no responsibility or warranty for the accuracy and completeness of the information, investors should do their own research and may seek professional advice before investing.

Most Discussed

  1. 1
     
     
     
     
  2. 2
     
     
     
     
  3. 3
     
     
     
     
  4. 4
     
     
     
     
  5. 5
     
     
     
     
  6. 6
     
     
     
     
  7. 7
     
     
     
     
  8. 8
     
     
     
     
  9. 9
     
     
     
     
  10. 10