DeFi-протокол Pendle потерял $27 млн в результате эксплойта

cryptonews.ruPublicado a 2024-09-04Actualizado a 2024-09-04

3 сентября хакер атаковал DeFi-протокол Pendle и вывел цифровые активы на сумму более $27,3 млн. Об этом сообщили специалисты PeckShield.

The loss is >$27M if we take into account the stolen YT tokens and possibly loss from other chain. https://t.co/5bdhjf2WIH
— PeckShield Inc. (@peckshield) September 3, 2024

«Первопричиной стало внедрение злонамеренного рынка, который использовали для раздувания баланса стейкинга с целью получения необоснованных вознаграждений», — пояснили эксперты.

Согласно заявлению команды Pendle, внутренняя система мониторинга обнаружила подозрительный контракт, финансируемый из миксера Tornado Cash. Разработчики остановили ввод и вывод средств, а также работу всех рынков на платформе.

По их словам, своевременные действия помогли защитить примерно $105 млн, которые хакер теоретически мог вывести из Pendle.

Команда подтвердила, что злоумышленник использовал функцию протокола, позволяющую размещать рынки без ограничений.

Post Mortem

Earlier today, a security breach targeting Penpie led to some loss of funds. In response, Pendle promptly paused our contracts, effectively safeguarding ~$105M that could have been further drained from Penpie.

Thanks to coordinated efforts from multiple parties,… https://t.co/KJd4SIRxPK
— Pendle (@pendle_fi) September 4, 2024

На момент написания платформа вернулась к работе в штатном режиме. В Pendle предложили хакеру перейти в разряд «белых шляп», вернув средства за вознаграждение. Взамен ему пообещали сохранение конфиденциальности и отсутствие юридического преследования.

«Мы надеемся, что вы видите ценность в решении этого вопроса мирным путем. Пожалуйста, свяжитесь с нами, чтобы обсудить детали», — написали разработчики.

Цена токена Penpie (PNP) отреагировала на инцидент обвалом с отметки $1,33 до $0,89. Котировки восстановились к уровням в районе $0,98, потеряв за сутки 34,2% (CoinGecko).

Данные: CoinGecko.

Капитализация монеты составляет ~$5,15 млн.

По данным DeFi Llama, стоимость заблокированных в смарт-контрактах Penpie средств — $90,44 млн. На зафиксированном в июле максимуме показатель превышал $386 млн.

Напомним, в августе хакеры украли цифровые активы на сумму $313,86 млн в ходе более чем 10 атак, подсчитали в PeckShield.

Criptos en tendencia

CitreaCTR

wrapped stUSDTWSTUSDT

Velodrome FinanceVELODROME

BrevisBREV

ZRX（0X）ZRX

PancakeSwapCAKE

Lecturas Relacionadas

Bittensor's Intellectual Arbitrage Trap: Capital Only Speculates on Tokens, Quality AI Goes Unpaid

The article critiques the inherent flaws in the Bittensor network's decentralized AI incentive model. While designed to use TAO tokens to reward AI development across specialized subnets (like model training or data crawling), the system prioritizes capital flow over genuine utility. A subnet's reward allocation is primarily determined by the price of its native Alpha token, creating a self-reinforcing loop where buying pressure begets more rewards, detached from the actual quality or real-world adoption of the AI services. Critical vulnerabilities are exposed: the scoring mechanism for AI outputs can be gamed if a majority of validators collude, and "score copying" among validators is possible. The network's value is anchored to speculative trading rather than verified user demand or revenue. Despite these issues, the author acknowledges Bittensor's potential to foster open, distributed AI infrastructure, similar to how past tech bubbles built lasting assets. The pending approval of Bittensor ETFs could bring both significant capital and necessary regulatory scrutiny, potentially forcing the ecosystem to mature and align incentives with tangible value creation.

Foresight NewsHace 9 min(s)

Bittensor's Intellectual Arbitrage Trap: Capital Only Speculates on Tokens, Quality AI Goes Unpaid

Foresight NewsHace 9 min(s)

‘Walled off’ – Hyperliquid, Phantom press CFTC for 3 DeFi demands

Hyperliquid and Solana-based wallet Phantom have urged the U.S. Commodity Futures Trading Commission (CFTC) to modernize regulations for decentralized finance (DeFi). In a letter, they made three key requests: first, that non-custodial software developers not be automatically treated as brokers or exchanges; second, that existing no-action relief for self-custodial wallets be formalized into guidance; and third, that the CFTC create a framework allowing regulated entities to use blockchain for trading and settlement. They argue these changes are necessary to prevent stifling innovation and pushing activity offshore. The request responds to a CFTC inquiry on barriers to fintech partnerships. Similar exemptions are under discussion in the proposed CLARITY Act. However, granting these requests could face legal challenges from traditional market participants like the Chicago Mercantile Exchange (CME), which has previously sued the CFTC over crypto product approvals. Traditional players argue DeFi platforms should meet the same regulatory standards as conventional exchanges. With the CLARITY Act's future uncertain, any CFTC action on DeFi exemptions may lead to further litigation.

ambcryptoHace 13 min(s)

‘Walled off’ – Hyperliquid, Phantom press CFTC for 3 DeFi demands

ambcryptoHace 13 min(s)

Walsh Is Quietly Reshaping the Federal Reserve Through Five Working Groups

In an effort to subtly reshape the Federal Reserve, Chair Kevin Wash has established five "Chair's Advancement of Monetary Policy" working groups. These groups, led entirely by 15 external experts and supported by Fed staff, cover the entire monetary policy "operating system": data inputs, productivity/employment/inflation models, balance sheet tools, and external communications. The initiative centralizes agenda-setting, knowledge production, data access, and public narrative control under the Chair's office, while formal decision-making power remains with the FOMC and Board. Analysts note this mirrors tactics like China's use of central working groups—bypassing bureaucratic inertia, creating parallel reporting channels, and enabling rapid "top-level design" to reset policy agendas. This suggests Wash may hold off on major policy moves until the groups conclude their studies. Key future questions are whether these groups become permanent and if their conclusions effectively become pre-determined policy for the FOMC to ratify.

marsbitHace 52 min(s)

Walsh Is Quietly Reshaping the Federal Reserve Through Five Working Groups

marsbitHace 52 min(s)

WEEX TradFi Trading Competition Kicks Off, 50,000 USDT Prize Pool First-Come, First-Served, Open a Position and Get 5 U

WEEX Exchange Launches "TradFi Trading Competition" with a 50,000 USDT Prize Pool Amidst a crypto market downturn, WEEX Exchange highlights the growth of tokenized traditional finance (TradFi) assets as a key trend, allowing users to trade stocks, ETFs, and commodities using crypto. The platform has launched a "TradFi Trading Competition" from July 9th to 23rd, featuring a 50,000 USDT prize pool. The campaign offers three reward tiers: 1. **New User Bonus (25,000 USDT pool):** New users depositing ≥100 USDT, completing a specified spot trade, and one TradFi contract trade (margin ≥10 USDT) receive 200 USDT. 2. **Volume-Based Rewards (20,000 USDT pool):** All users can earn tiered bonuses for achieving TradFi contract trading volumes of 5,000 USDT (3 USDT), 20,000 USDT (10 USDT), and 100,000 USDT (50 USDT). Rewards are stackable. 3. **Participation Reward:** Any user opening a TradFi contract trade during the event receives 5 USDT instantly. The article promotes WEEX's TradFi features, which include trading tokenized shares of companies like NVIDIA and Tesla using USDT, 24/7 trading, fractional share investing starting from $5, and high leverage up to 100x for hedging. It positions these features as solutions to traditional investing barriers like high fees, strict trading hours, and high share prices. The summary concludes by encouraging users to join the competition and leverage WEEX's platform to access global TradFi markets.

marsbitHace 1 hora(s)

WEEX TradFi Trading Competition Kicks Off, 50,000 USDT Prize Pool First-Come, First-Served, Open a Position and Get 5 U

marsbitHace 1 hora(s)

Switching Chains for Another Shot at Success: Can It Really 'Change One's Destiny'?

Recent months have witnessed a wave of established blockchain projects migrating to new public chains, notably Base and Arbitrum, coupled with strategic pivots in their business models—essentially "re-starting" elsewhere. Examples include Sophon (moving from ZKsync to Base to cut $3M+ annual costs and focus on consumer apps), Moonbeam (shifting from Polkadot to Base to pursue decentralized AI), and Secret Network (planning a move from Cosmos to Arbitrum to explore privacy-AI integrations, though its token price plunged 30% post-announcement). A common thread is that these migrating projects are primarily layer-1 or layer-2 chains now seeking relevance in AI and real-world consumer applications. This trend highlights the relative stagnation of ecosystems like Polkadot and Cosmos, which are seeing significant outflows. However, the community remains skeptical about whether such chain-hopping truly enables a turnaround. Historical cases like y00ts NFTs (which moved from Solana to Polygon and back to Ethereum) and Synthetix (which retreated from a multi-chain strategy) show that migration often fails to deliver expected benefits and can add complexity. In today's more rational market, devoid of easy narrative or airdrop红利, simply changing chains is unlikely to be a silver bullet. For both migrating projects and destination chains, the real challenge lies not in attracting projects but in developing actual use cases that retain users.

marsbitHace 1 hora(s)

Switching Chains for Another Shot at Success: Can It Really 'Change One's Destiny'?

marsbitHace 1 hora(s)

Trading

Spot

Artículos destacados

Cómo comprar PENDLE

¡Bienvenido a HTX.com! Hemos hecho que comprar Pendle (PENDLE) sea simple y conveniente. Sigue nuestra guía paso a paso para iniciar tu viaje de criptos.Paso 1: crea tu cuenta HTXUtiliza tu correo electrónico o número de teléfono para registrarte y obtener una cuenta gratuita en HTX. Experimenta un proceso de registro sin complicaciones y desbloquea todas las funciones.Obtener mi cuentaPaso 2: ve a Comprar cripto y elige tu método de pagoTarjeta de crédito/débito: usa tu Visa o Mastercard para comprar Pendle (PENDLE) al instante.Saldo: utiliza fondos del saldo de tu cuenta HTX para tradear sin problemas.Terceros: hemos agregado métodos de pago populares como Google Pay y Apple Pay para mejorar la comodidad.P2P: tradear directamente con otros usuarios en HTX.Over-the-Counter (OTC): ofrecemos servicios personalizados y tipos de cambio competitivos para los traders.Paso 3: guarda tu Pendle (PENDLE)Después de comprar tu Pendle (PENDLE), guárdalo en tu cuenta HTX. Alternativamente, puedes enviarlo a otro lugar mediante transferencia blockchain o utilizarlo para tradear otras criptomonedas.Paso 4: tradear Pendle (PENDLE)Tradear fácilmente con Pendle (PENDLE) en HTX's mercado spot. Simplemente accede a tu cuenta, selecciona tu par de trading, ejecuta tus trades y monitorea en tiempo real. Ofrecemos una experiencia fácil de usar tanto para principiantes como para traders experimentados.

348 Vistas totalesPublicado en 2024.12.12Actualizado en 2026.06.02

Discusiones

Bienvenido a la comunidad de HTX. Aquí puedes mantenerte informado sobre los últimos desarrollos de la plataforma y acceder a análisis profesionales del mercado. A continuación se presentan las opiniones de los usuarios sobre el precio de PENDLE (PENDLE).