2026-04-17 Пятница

Новостной центр - Страница 21

Получайте криптоновости и тенденции рынка в режиме реального времени с помощью Новостного центра HTX.

In-Depth Reconstruction of the $285 Million Drift Hack: How Should DeFi Governance Move Beyond "Amateur Hour"?

On April 1, 2026, Drift Protocol, the largest perpetual futures DEX on Solana, suffered a catastrophic hack resulting in a loss of $285 million. The attack, attributed to a sophisticated social engineering campaign rather than a technical exploit, unfolded over several months. Hackers first infiltrated Drift’s internal circles by posing as a legitimate market maker, building trust over time. They then exploited Solana’s "Durable Nonce" feature to trick core team members into blindly signing transactions that granted administrative control. A critical vulnerability was introduced when Drift migrated to a 2/5 multisig structure without a timelock, allowing instant execution of privileged transactions with just two signatures. The attackers finally triggered the attack by adding a fake token (CVT) to the whitelist, manipulating its oracle price, and using it as collateral to drain the protocol’s treasury. The incident highlights fundamental flaws in DeFi governance, including overreliance on multisig mechanisms that lack intent verification and are vulnerable to social engineering. It underscores the misalignment between retail-grade security tools and institutional-scale treasury management. The hack signals the need for a security paradigm shift in DeFi, including adoption of Hardware Security Modules (HSMs) for key management, intent-based policy engines for transaction validation, and professional third-party custody solutions to ensure institutional-grade safety.

marsbit04/13 12:00

In-Depth Reconstruction of the $285 Million Drift Hack: How Should DeFi Governance Move Beyond "Amateur Hour"?

marsbit04/13 12:00

1 Billion DOT Minted Out of Thin Air, Yet Hacker Only Made $230,000

On April 13, a security breach occurred involving the Polkadot bridge on the Ethereum network, where an attacker exploited a replay vulnerability in the MMR proof mechanism of Hyperbridge’s ISMP protocol. By reusing a historically valid proof and pairing it with a malicious request, the attacker bypassed verification and gained admin and minting rights over the wrapped DOT contract on Ethereum. They then minted 1 billion wrapped DOT tokens—2,805 times the existing supply—and attempted to liquidate them. However, due to extremely low liquidity in the wrapped DOT market, the massive sell-off crashed the token’s price by 99.98%, from $1.22 to approximately $0.000128. The attacker ultimately exchanged the tokens for only about 108.2 ETH (worth roughly $237,000), with gas costs as low as $0.74. The same exploit had been used previously in attacks on MANTA and CERE tokens, resulting in a total loss of around $242,000. Polkadot confirmed that the incident only affected DOT bridged via Hyperbridge to Ethereum and did not impact the native Polkadot network or DOT on other bridges. Exchanges including Upbit and Bithumb temporarily suspended DOT deposits and withdrawals as a precaution. The event highlights ongoing vulnerabilities in cross-chain infrastructure and the critical role of liquidity in limiting actual damages during large-scale exploits. It also reflects a broader trend of increasing DeFi security incidents in early 2026.

marsbit04/13 10:10

1 Billion DOT Minted Out of Thin Air, Yet Hacker Only Made $230,000

marsbit04/13 10:10

Iran's Impact on the Dollar: The Perfect Storm of Petrodollars

The report analyzes the profound impact of the Iran conflict on the petrodollar system, the cornerstone of dollar hegemony since 1974. It argues that the system, where global oil purchases in dollars lead to surplus recycling into U.S. Treasuries, is under unprecedented strain from three layers of pressure: pre-existing structural cracks, new shocks from the conflict, and the long-term threat of energy transition. Key structural cracks include the U.S. no longer being the primary buyer of Middle Eastern oil due to its shale revolution, Saudi Arabia's push for defense autonomy, the development of alternative payment infrastructure like Project mBridge, and sanctions driving de-dollarization. The conflict itself is damaging U.S. security credibility, shifting control of the Strait of Hormuz, and potentially forcing a shift to yuan-for-oil arrangements. The analysis details five complex mechanisms linking oil prices and U.S. Treasury yields, which can push in opposite directions. Crucially, the old logic is failing: oil producers, damaged by conflict, may become net sellers of U.S. debt to fund reconstruction, just as U.S. fiscal deficits and debt supply surge. While short-term buffers exist, like U.S. energy independence, the long-term trend points towards a world with less dollar dominance. The core conclusion is that a world focused on defense and energy self-sufficiency will inherently hold fewer dollar reserves, signaling a slow but structural decline in the petrodollar system.

marsbit04/13 10:01

Iran's Impact on the Dollar: The Perfect Storm of Petrodollars

marsbit04/13 10:01

活动图片