Ошибка оракула Chainlink привела к краже более $2 млн из DeFi-протоколов

cryptonews.ru2025-11-17 tarihinde yayınlandı2025-11-17 tarihinde güncellendi

Инцидент с неправильной работой оракула Chainlink стал причиной крупной серии атак на DeFi-протоколы. Ошибка в передаче данных о цене токена wrstETH, которая временно показывала $5,8 млн вместо реальных $3000, позволила злоумышленнику провести серию эксплойтов, начав с Moonwell. По данным CertiK, хакер использовал флеш-займ на 0,02 wrstETH, внес его как залог и смог неоднократно брать кредиты более чем на 20 wstETH, в результате чего украл 295 ETH, что эквивалентно примерно $1 млн.

Эксперт под псевдонимом Dami назвал произошедшее «безумием» и возложил ответственность на Chainlink, чьи данные стали ключевым источником уязвимости. Согласно его заявлению, ошибка оракула позволила системе переоценить актив и выдать заем под завышенную стоимость. Вследствие этого смарт-контракт Moonwell непреднамеренно предоставил хакеру возможность многократного кредитования без достаточного обеспечения.

Позднее аналитик под псевдонимом Specter сообщил, что тот же атакующий ранее уже уже эксплуатировал протокол Moonwell 10 октября, когда ему удалось вывести 269 ETH (около $1 млн). Судя по всему, команда проекта не устранила уязвимость, что позволило злоумышленнику вернуться и повторно провести атаку, увеличив общие потери до более чем $2 млн.

Дополнительно стало известно, что этот же адрес был замешан в ряде аналогичных эксплойтов других лендинговых протоколов, включая Venus Protocol ($664 тыс.), TakaraLend ($450 тыс.), а также атаковал мелкие проекты вроде LobsterFi и OrbiterOne. Несмотря на схожие признаки, большинство пострадавших команд не делали официальных заявлений, что вызывает обеспокоенность у исследователей в секторе безопасности.

По данным Specter, злоумышленник действует в течение года, эксплуатируя слабые места в системах оракулов и риск-моделях DeFi-протоколов. Его стратегия основывается на поиске несанкционированных расхождений между ценовыми фидами и реальными данными, что позволяет проводить атаки без непосредственного взлома смарт-контрактов. Последний инцидент вновь поставил под сомнение надежность оракульных решений.

Trend Kriptolar

CitreaCTR

wrapped stUSDTWSTUSDT

Velodrome FinanceVELODROME

BrevisBREV

ZRX（0X）ZRX

PancakeSwapCAKE

İlgili Okumalar

Bitcoin consolidates near $60K – Can BTC whale demand beat ETF selling?

Bitcoin is consolidating near $60,000, with on-chain data showing whales are persistently accumulating BTC at these price levels, viewing them as attractive for long-term holdings. This whale demand has remained resilient and provides structural price support, even as their accumulation rate has moderated from previous surges. However, this bullish on-chain trend contrasts with significant and persistent outflows from Bitcoin spot ETFs, representing substantial institutional selling pressure. The key question is whether this new whale and exchange inflow demand can sufficiently counteract the ETF selling to establish a solid foundation for a price recovery. The market dynamic suggests a potential transition of ownership from weaker to stronger hands, but persistent ETF redemptions may continue to delay a clear bullish momentum shift.

ambcrypto6 dk önce

Bitcoin consolidates near $60K – Can BTC whale demand beat ETF selling?

ambcrypto6 dk önce

Valuation Inversion Emerges, Bitcoin Treasury Companies Face Trust Crisis

"Valuation Inversion Emerges, Sparking Trust Crisis for Bitcoin Treasury Firms" The investment thesis for corporate Bitcoin treasury stocks has fundamentally shifted. Investors are no longer rewarding companies simply for accumulating more Bitcoin. Instead, the focus is now on net Bitcoin per share, with intense scrutiny on whether new financings truly benefit existing shareholders or merely dilute their stake. Key indicators highlight the new reality. Metaplanet's market capitalization has fallen below the total value of its Bitcoin holdings, indicating a valuation discount. While MicroStrategy maintains a premium, its core metric—Bitcoin per diluted share for common shareholders—has been declining due to dilution from financing activities, primarily through its STRAT permanent preferred shares. This marks a transition from a pure "asset accumulation" phase to an "equity attribution" phase. Investors now deduct costs like preferred dividends and debt to calculate the actual Bitcoin claim for common equity. The widespread adoption of spot Bitcoin ETFs has removed the scarcity value these stocks once held, forcing them to justify their structure with superior leverage, dividends, or capital efficiency. European entrants like France's Capital B and Sweden's BTC AB are testing this new environment with ambitious funding plans backed by relatively small Bitcoin holdings. They are asking investors to bear complex capital structures, betting future Bitcoin purchases will cover all dilution and dividend costs. The sector's core risk is a broken financing loop. Once a company's stock trades below its Bitcoin net asset value, it loses the ability to issue equity for accretive purchases. It is then left with unpalatable choices: dilutive financing at a discount, venturing into new businesses like Bitcoin lending, or selling assets. The winners in this next phase will be those that demonstrably increase Bitcoin per share for common shareholders with every financing move.

Foresight News31 dk önce

Valuation Inversion Emerges, Bitcoin Treasury Companies Face Trust Crisis

Foresight News31 dk önce

NanoBit’s crypto scam ends in a $5.52M SEC victory – Here’s how

The U.S. Securities and Exchange Commission (SEC) secured a victory against NanoBit and related entities for operating a 'pig butchering' cryptocurrency scam between September 2023 and June 2024. Scammers used messaging apps to contact victims, promoting fraudulent initial coin offerings with promises of high returns and falsely claiming SEC registration. The U.S. District Court for the Eastern District of New York issued a final judgment against two individuals and four organizations. The court found that no actual transactions occurred on the NanoBit platform, with investor funds being misappropriated and wired overseas. All defendants received permanent injunctions for violating anti-fraud securities laws. They were ordered to pay a total of approximately $5.52 million in penalties, comprising disgorgement of illicit profits, pre-judgment interest, and civil fines. NanoBit itself owes about $1.8 million. The court noted the defendants' willful default and the absence of any meritorious defense.

ambcrypto34 dk önce

NanoBit’s crypto scam ends in a $5.52M SEC victory – Here’s how

ambcrypto34 dk önce

Claude Code Announces Major Next-Gen Upgrade: You Chat, and the Backend Gets the Job Done

Claude Code's next major upgrade will make its sub-agents run in the background by default, transforming the tool from a conversational interface into a multi-threaded workflow engine. Users can chat with Claude while sub-agents handle tasks like code refactoring, running tests, and opening PRs in parallel. Creator Boris Cherny, who hasn't written a line of code in eight months and sometimes manages thousands of AI agents, states that users are no longer just prompters; "another Claude writes the prompts." This evolution builds on recent features like Routines for scheduled tasks and Dynamic Workflows for complex, multi-agent jobs. The change signifies a shift where engineers focus on strategy and decision-making rather than writing code. Anthropic's internal data suggests Claude Code triples engineering output, creating a bottleneck for product managers who can't generate enough work. Spotify's case study reveals that 73% of its pull requests are AI-assisted, with executives using the tool to build prototypes directly from natural language descriptions. The core takeaway: the scarcest resource is no longer the ability to write code, but the ability to decide what code to write.

marsbit35 dk önce

Claude Code Announces Major Next-Gen Upgrade: You Chat, and the Backend Gets the Job Done

marsbit35 dk önce

a16z Brief: Prediction Markets Set a Record for the Third Consecutive Week, Weekly Trading Volume Surpasses $14.4 Billion for the First Time

A16z Crypto's weekly report highlights record-breaking activity in prediction markets. For the third consecutive week, total weekly trading volume hit a new all-time high, surpassing $14.4 billion for the first time, a significant jump from the $5-6 billion range seen earlier this year. Aggregate open interest also reached a new weekly record of $1.6 billion, marking its third straight week of growth. This metric, which reflects the total value of unsettled bets, has increased roughly 8-fold since last autumn, indicating sustained capital inflow. While events like the World Cup drove initial interest, growth has expanded beyond sports. Non-sports categories—including politics, economics, and geopolitics—achieved a weekly volume of $3.6 billion across platforms like Kalshi and Polymarket. This figure now exceeds the entire prediction market's weekly volume (including sports) from last year. Since July 2025, non-sports trading volume has grown approximately 18-fold, with acceleration notably steepening recently.

marsbit36 dk önce

a16z Brief: Prediction Markets Set a Record for the Third Consecutive Week, Weekly Trading Volume Surpasses $14.4 Billion for the First Time

marsbit36 dk önce

İşlemler

Spot

Popüler Makaleler

LINK Nasıl Satın Alınır

HTX.com’a hoş geldiniz! ChainLink (LINK) satın alma işlemlerini basit ve kullanışlı bir hâle getirdik. Adım adım açıkladığımız rehberimizi takip ederek kripto yolculuğunuza başlayın. 1. Adım: HTX Hesabınızı OluşturunHTX'te ücretsiz bir hesap açmak için e-posta adresinizi veya telefon numaranızı kullanın. Sorunsuzca kaydolun ve tüm özelliklerin kilidini açın. Hesabımı Aç2. Adım: Kripto Satın Al Bölümüne Gidin ve Ödeme Yönteminizi SeçinKredi/Banka Kartı: Visa veya Mastercard'ınızı kullanarak anında ChainLink (LINK) satın alın.Bakiye: Sorunsuz bir şekilde işlem yapmak için HTX hesap bakiyenizdeki fonları kullanın.Üçüncü Taraflar: Kullanımı kolaylaştırmak için Google Pay ve Apple Pay gibi popüler ödeme yöntemlerini ekledik.P2P: HTX'teki diğer kullanıcılarla doğrudan işlem yapın.Borsa Dışı (OTC): Yatırımcılar için kişiye özel hizmetler ve rekabetçi döviz kurları sunuyoruz.3. Adım: ChainLink (LINK) Varlıklarınızı SaklayınChainLink (LINK) satın aldıktan sonra HTX hesabınızda saklayın. Alternatif olarak, blok zinciri transferi yoluyla başka bir yere gönderebilir veya diğer kripto para birimlerini takas etmek için kullanabilirsiniz.4. Adım: ChainLink (LINK) Varlıklarınızla İşlem YapınHTX'in spot piyasasında ChainLink (LINK) ile kolayca işlemler yapın.Hesabınıza erişin, işlem çiftinizi seçin, işlemlerinizi gerçekleştirin ve gerçek zamanlı olarak izleyin. Hem yeni başlayanlar hem de deneyimli yatırımcılar için kullanıcı dostu bir deneyim sunuyoruz.

909 Toplam GörüntülenmeYayınlanma 2024.12.13Güncellenme 2026.06.02

Tartışmalar

HTX Topluluğuna hoş geldiniz. Burada, en son platform gelişmeleri hakkında bilgi sahibi olabilir ve profesyonel piyasa görüşlerine erişebilirsiniz. Kullanıcıların LINK (LINK) fiyatı hakkındaki görüşleri aşağıda sunulmaktadır.