Ошибка оракула Chainlink привела к краже более $2 млн из DeFi-протоколов

cryptonews.ruPublished on 2025-11-17Last updated on 2025-11-17

Инцидент с неправильной работой оракула Chainlink стал причиной крупной серии атак на DeFi-протоколы. Ошибка в передаче данных о цене токена wrstETH, которая временно показывала $5,8 млн вместо реальных $3000, позволила злоумышленнику провести серию эксплойтов, начав с Moonwell. По данным CertiK, хакер использовал флеш-займ на 0,02 wrstETH, внес его как залог и смог неоднократно брать кредиты более чем на 20 wstETH, в результате чего украл 295 ETH, что эквивалентно примерно $1 млн.

Эксперт под псевдонимом Dami назвал произошедшее «безумием» и возложил ответственность на Chainlink, чьи данные стали ключевым источником уязвимости. Согласно его заявлению, ошибка оракула позволила системе переоценить актив и выдать заем под завышенную стоимость. Вследствие этого смарт-контракт Moonwell непреднамеренно предоставил хакеру возможность многократного кредитования без достаточного обеспечения.

Позднее аналитик под псевдонимом Specter сообщил, что тот же атакующий ранее уже уже эксплуатировал протокол Moonwell 10 октября, когда ему удалось вывести 269 ETH (около $1 млн). Судя по всему, команда проекта не устранила уязвимость, что позволило злоумышленнику вернуться и повторно провести атаку, увеличив общие потери до более чем $2 млн.

Дополнительно стало известно, что этот же адрес был замешан в ряде аналогичных эксплойтов других лендинговых протоколов, включая Venus Protocol ($664 тыс.), TakaraLend ($450 тыс.), а также атаковал мелкие проекты вроде LobsterFi и OrbiterOne. Несмотря на схожие признаки, большинство пострадавших команд не делали официальных заявлений, что вызывает обеспокоенность у исследователей в секторе безопасности.

По данным Specter, злоумышленник действует в течение года, эксплуатируя слабые места в системах оракулов и риск-моделях DeFi-протоколов. Его стратегия основывается на поиске несанкционированных расхождений между ценовыми фидами и реальными данными, что позволяет проводить атаки без непосредственного взлома смарт-контрактов. Последний инцидент вновь поставил под сомнение надежность оракульных решений.

Trending Cryptos

ctr
CitreaCTR
wstusdt
wrapped stUSDTWSTUSDT
apr
aPrioriAPR
ctx
Cryptex FinanceCTX
audio
AudiusAUDIO
mantra
MantraMANTRA
xvs
VenusXVS
waxl
AxelarWAXL
bill
Billions NetworkBILL
pyth
PYTH (Pyth)PYTH
rune
THORChainRUNE
velodrome
Velodrome FinanceVELODROME
brev
BrevisBREV
zrx
ZRX（0X）ZRX
cake
PancakeSwapCAKE

Related Reads

Has Bitcoin Bottomed? Unpacking 12 Key Data Indicators

Author: BitalkNews **Title: Has Bitcoin Bottomed? Analyzing 12 Key Data Indicators** The current Bitcoin price is around $59,600, representing a maximum drawdown of approximately 53% from the 2025 high. The market is in a deep correction phase. Multiple indicators suggest valuations are nearing historical lows, but a confirmed bottom requires more time. **Summary of Key Indicators:** 1. **Fear & Greed Index:** At 16, indicating "Extreme Fear," similar to levels seen during the 2022 FTX collapse. 2. **Rainbow Chart:** BTC has fallen into the "Bitcoin is dead" zone, only the second such occurrence historically. 3. **MVRV Ratio:** Currently around 1.13, near the lower historical band, pointing to a bottoming valuation area (approx. $53,200-$53,400). 4. **Realized Price:** The aggregate cost basis is ~$53,400; the current price is only about 12% above it but hasn't broken below yet. 5. **UTXO Profit/Loss Ratio:** Has dropped to its lowest level this cycle, signaling a potential "capitulation" event often seen near cycle bottoms. 6. **Long-Term Holder SOPR:** For holders >155 days, it's at 0.662, now negative, indicating seasoned investors are selling at a loss. 7. & 8. **Miner Health:** ~20% of miners are unprofitable, and actual miner revenue is below theoretical levels, indicating ongoing miner stress. 9. **ETF Flows:** U.S. spot BTC ETFs have seen sustained net outflows, including a 13-day streak with over $1.7B in weekly outflows. 10. **Strategy Risk:** Strategy's stock premium has significantly contracted, pressuring the traditional "borrow-to-buy" model. 11. **Bear Duration & Drawdown:** The correction has lasted >265 days with a ~52.5% drawdown, shorter in depth but lengthy in duration. 12. **Market Expectations (Polymarket):** Betting markets suggest an ~80% probability of BTC falling below $55,000 and a notable chance below $50,000. **Conclusion:** Bitcoin is in a deep correction with potential bottom formation. Valuation metrics are in historically low ranges, and on-chain capitulation signals are accumulating. However, a complete shakeout isn't finished—the realized price hasn't been breached, and ETF demand hasn't reversed. The area below $60,000 holds long-term appeal, but patience is advised. Key signals to watch for include a return to ETF inflows, a recovery in the Long-Term Holder SOPR, and easing miner pressure.

marsbit2m ago

Has Bitcoin Bottomed? Unpacking 12 Key Data Indicators

marsbit2m ago

Bitcoin consolidates near $60K – Can BTC whale demand beat ETF selling?

Bitcoin is consolidating near $60,000, with on-chain data showing whales are persistently accumulating BTC at these price levels, viewing them as attractive for long-term holdings. This whale demand has remained resilient and provides structural price support, even as their accumulation rate has moderated from previous surges. However, this bullish on-chain trend contrasts with significant and persistent outflows from Bitcoin spot ETFs, representing substantial institutional selling pressure. The key question is whether this new whale and exchange inflow demand can sufficiently counteract the ETF selling to establish a solid foundation for a price recovery. The market dynamic suggests a potential transition of ownership from weaker to stronger hands, but persistent ETF redemptions may continue to delay a clear bullish momentum shift.

ambcrypto9m ago

Bitcoin consolidates near $60K – Can BTC whale demand beat ETF selling?

ambcrypto9m ago

Valuation Inversion Emerges, Bitcoin Treasury Companies Face Trust Crisis

"Valuation Inversion Emerges, Sparking Trust Crisis for Bitcoin Treasury Firms" The investment thesis for corporate Bitcoin treasury stocks has fundamentally shifted. Investors are no longer rewarding companies simply for accumulating more Bitcoin. Instead, the focus is now on net Bitcoin per share, with intense scrutiny on whether new financings truly benefit existing shareholders or merely dilute their stake. Key indicators highlight the new reality. Metaplanet's market capitalization has fallen below the total value of its Bitcoin holdings, indicating a valuation discount. While MicroStrategy maintains a premium, its core metric—Bitcoin per diluted share for common shareholders—has been declining due to dilution from financing activities, primarily through its STRAT permanent preferred shares. This marks a transition from a pure "asset accumulation" phase to an "equity attribution" phase. Investors now deduct costs like preferred dividends and debt to calculate the actual Bitcoin claim for common equity. The widespread adoption of spot Bitcoin ETFs has removed the scarcity value these stocks once held, forcing them to justify their structure with superior leverage, dividends, or capital efficiency. European entrants like France's Capital B and Sweden's BTC AB are testing this new environment with ambitious funding plans backed by relatively small Bitcoin holdings. They are asking investors to bear complex capital structures, betting future Bitcoin purchases will cover all dilution and dividend costs. The sector's core risk is a broken financing loop. Once a company's stock trades below its Bitcoin net asset value, it loses the ability to issue equity for accretive purchases. It is then left with unpalatable choices: dilutive financing at a discount, venturing into new businesses like Bitcoin lending, or selling assets. The winners in this next phase will be those that demonstrably increase Bitcoin per share for common shareholders with every financing move.

Foresight News34m ago

Valuation Inversion Emerges, Bitcoin Treasury Companies Face Trust Crisis

Foresight News34m ago

NanoBit’s crypto scam ends in a $5.52M SEC victory – Here’s how

The U.S. Securities and Exchange Commission (SEC) secured a victory against NanoBit and related entities for operating a 'pig butchering' cryptocurrency scam between September 2023 and June 2024. Scammers used messaging apps to contact victims, promoting fraudulent initial coin offerings with promises of high returns and falsely claiming SEC registration. The U.S. District Court for the Eastern District of New York issued a final judgment against two individuals and four organizations. The court found that no actual transactions occurred on the NanoBit platform, with investor funds being misappropriated and wired overseas. All defendants received permanent injunctions for violating anti-fraud securities laws. They were ordered to pay a total of approximately $5.52 million in penalties, comprising disgorgement of illicit profits, pre-judgment interest, and civil fines. NanoBit itself owes about $1.8 million. The court noted the defendants' willful default and the absence of any meritorious defense.

ambcrypto36m ago

NanoBit’s crypto scam ends in a $5.52M SEC victory – Here’s how

ambcrypto36m ago

Claude Code Announces Major Next-Gen Upgrade: You Chat, and the Backend Gets the Job Done

Claude Code's next major upgrade will make its sub-agents run in the background by default, transforming the tool from a conversational interface into a multi-threaded workflow engine. Users can chat with Claude while sub-agents handle tasks like code refactoring, running tests, and opening PRs in parallel. Creator Boris Cherny, who hasn't written a line of code in eight months and sometimes manages thousands of AI agents, states that users are no longer just prompters; "another Claude writes the prompts." This evolution builds on recent features like Routines for scheduled tasks and Dynamic Workflows for complex, multi-agent jobs. The change signifies a shift where engineers focus on strategy and decision-making rather than writing code. Anthropic's internal data suggests Claude Code triples engineering output, creating a bottleneck for product managers who can't generate enough work. Spotify's case study reveals that 73% of its pull requests are AI-assisted, with executives using the tool to build prototypes directly from natural language descriptions. The core takeaway: the scarcest resource is no longer the ability to write code, but the ability to decide what code to write.

marsbit38m ago

Claude Code Announces Major Next-Gen Upgrade: You Chat, and the Backend Gets the Job Done

marsbit38m ago

Trading

Spot

Hot Articles

How to Buy LINK

Welcome to HTX.com! We've made purchasing ChainLink (LINK) simple and convenient. Follow our step-by-step guide to embark on your crypto journey.Step 1: Create Your HTX AccountUse your email or phone number to sign up for a free account on HTX. Experience a hassle-free registration journey and unlock all features.Get My AccountStep 2: Go to Buy Crypto and Choose Your Payment MethodCredit/Debit Card: Use your Visa or Mastercard to buy ChainLink (LINK) instantly.Balance: Use funds from your HTX account balance to trade seamlessly.Third Parties: We've added popular payment methods such as Google Pay and Apple Pay to enhance convenience.P2P: Trade directly with other users on HTX.Over-the-Counter (OTC): We offer tailor-made services and competitive exchange rates for traders.Step 3: Store Your ChainLink (LINK)After purchasing your ChainLink (LINK), store it in your HTX account. Alternatively, you can send it elsewhere via blockchain transfer or use it to trade other cryptocurrencies.Step 4: Trade ChainLink (LINK)Easily trade ChainLink (LINK) on HTX's spot market. Simply access your account, select your trading pair, execute your trades, and monitor in real-time. We offer a user-friendly experience for both beginners and seasoned traders.

9.3k Total ViewsPublished 2024.03.29Updated 2026.06.02

How to Buy LINK

Discussions

Welcome to the HTX Community. Here, you can stay informed about the latest platform developments and gain access to professional market insights. Users' opinions on the price of LINK (LINK) are presented below.

活动图片

Top Questions