Разработчик DeFi-проекта BaseBros на Base скрылся с деньгами

cryptonews.ruОпубліковано о 2022-04-16Востаннє оновлено о 2024-09-16

BaseBros Fi, протокол децентрализованного финансирования (DeFi) оптимизации доходности на блокчейне Base, исчез из интернета после кражи инвестиций пользователей через неаудированный смарт-контракт.

13 сентября BaseBros удалил свой официальный сайт и аккаунты в социальных сетях на X и в Telegram. Компания по безопасности блокчейнов Chain Audits, которая ранее проводила аудит некоторых смарт-контрактов BaseBros, обнаружила, что проект DeFi проверенул классическую аферу с «выдергиванием коврика» через «неаудированный и непроверенный контракт Vault».

Источник: BaseBrosFi.

У BaseBros было около 2000 подписчиков на X и более 3300 участников на Telegram прямо перед его исчезновением.

Уязвимый смарт-контракт прошел аудит

ChainAudits заявили, что провели аудит четырех из пяти смарт-контрактов, используемых в проекте BaseBros, и добавили:

«К сожалению, контракт, который способствовал выдергиванию коврика (контракт Vault), не был включен в область нашего аудита и не был проверен на блокчейне».

Непроверенный контракт содержал лазейку (черный ход). Это позволило владельцам компании выводить средства, внесенные в контракт «Strategy».

Источник: Chain Audits

Выдергивание коврика BaseBros не оказало влияния на протокол Seamless

Изначально ошибочно предполагалось, что событие выдергивания коврика повлияло на протокол Seamless из-за схожей маркировки контракта. По словам следователя по блокчейну Cyvers, злоумышленник вывел украденные средства на сумму 130 000 долларов через сервис криптомикширования Tornado Cash (TORN).

Источник: Cyvers.

Seamless провел внутреннее расследование и объявил протокол и средства его инвесторов защищенными от любых атак. Chain Audits также подтвердил, что BaseBro Fi был единственным протоколом, который пострадал и потерял средства из нескольких пулов.

Недавно опытный хакер похвалил злоумышленника, ответственного за взлом DeFi-протокола Penpie на 27 миллионов долларов.

Хакер Penpie получил сообщение с благодарностью от хакера Euler Finance, который украл 195 миллионов долларов в марте 2023 года.

«Молодец, братан. Я давно не видел такого взлома. Я рад, что ты сохранил все деньги и не позволил этим ублюдкам вернуть себе ни одного доллара из того, что ты взял. Ты выиграл, они проиграли. Молодец», — написал хакер Euler.

Однако хакер Euler Finance вернул 90% украденных средств в обмен на правовой иммунитет и вознаграждение в размере 10%.

Пов'язані матеріали

Ethlabs Founded, Treasury Companies to Fund Ethereum Post-EF

Former Ethereum Foundation (EF) core researchers Ansgar Dietrichs, Barnabé Monnot, Caspar Schwarz-Schilling, Josh Rudolf, and Julian Ma announced the launch of Ethlabs, an independent non-profit R&D lab focused on Ethereum core protocol research and institutional-grade infrastructure. The initiative, backed by over 50 community participants including ETH treasury companies BitMine and Sharplink, Joseph Lubin, Hayden Adams, and Jesse Pollak, aims to make Ethereum the global economic settlement layer. This move comes amidst significant pressure on the EF, which has seen key departures and a strategic narrowing of its focus. A critical funding gap of approximately $30 million annually for core client development, following the expiration of the client incentive program, poses a near-term risk to the network's development. The context includes the evolution of ETH's value narrative. While mechanisms like EIP-1559 and the Merge previously supported the "ultrasound money" thesis, the success of L2 scaling via EIP-4844 has drastically reduced L1 fee revenue, leading to net ETH issuance and challenging that narrative. Ethlabs has listed ETH monetary economics as a primary research focus. Backing from corporate ETH treasuries like BitMine and Sharplink represents a strategic alignment, as these entities' asset values are directly tied to Ethereum's health and adoption. Their support is an investment rather than a pure donation. Ethereum's governance is shifting from a centralized EF model to a distributed network of specialized "manager nodes," including Ethlabs and a streamlined EF. While this promotes efficiency and reduces single-point failure risk, it introduces new challenges in coordination, priority alignment, and filling critical funding gaps across the decentralized ecosystem.

Foresight News2 хв тому

Ethlabs Founded, Treasury Companies to Fund Ethereum Post-EF

Foresight News2 хв тому

WSJ: Fake Websites, Fake Trades, Real Promotion: The Traffic Scam of Polymarket

A Wall Street Journal investigation found that prediction market platform Polymarket used a deceptive marketing campaign involving dozens of paid creators, mostly college students, to fabricate a narrative of easy, high-profit betting to attract U.S. users. The creators produced over 1,100 social media videos showing themselves placing bets and celebrating large, fake wins—totaling nearly $900,000 in fabricated profits—on simulated versions of the Polymarket website. These "poiymarket" clone sites, created by Polymarket, were nearly indistinguishable from the real site but contained subtle errors. The creators, paid $2,000-$3,000 monthly, were allegedly instructed not to disclose their paid partnership. The campaign, managed with a marketing contractor, also employed a "slicer" army to virally repost content, amassing over 140 million views. Videos sometimes highlighted the ease of insider trading on the platform. Polymarket, which has been barred from offering its core crypto platform in the U.S. since 2022, stated it is committed to accurate, fair, and transparent markets and plans a comprehensive audit of its promotional content. The fake websites were taken down after the WSJ's inquiry.

Odaily星球日报5 хв тому

WSJ: Fake Websites, Fake Trades, Real Promotion: The Traffic Scam of Polymarket

Odaily星球日报5 хв тому

From Logo to Bo Niu: TRON Further Perfects Its Brand Visual Assets

On June 23rd, TRON completed a significant upgrade to its official mascot, Bo Niu. The revamped character features larger, brighter eyes, more expressive facial details, and a clearer "T" structural motif, while retaining its signature red-and-white color scheme and horned design. This refresh aims to enhance Bo Niu's approachability, emotional range, and versatility for use across social media, community interactions, offline events, and branded merchandise. The redesign focuses on creating a stronger first impression. A more open facial structure with distinct, expressive eyes and the addition of a mouth with a small fang make the character friendlier and more suitable for dynamic content like animations and emojis. Subtle brand elements are integrated, such as stylized cheek lines inspired by "signal" icons, referencing the "wave" in "TRON," and a "T" shape formed by its smile and chest markings. Bo Niu has also been given a more defined personality as "TRON's Chief Luck Officer," with traits like being playful and sweet. This persona provides a more accessible and emotionally resonant entry point to the TRON brand, contrasting with often technical Web3 narratives. This mascot upgrade is part of TRON's ongoing effort to build a comprehensive and extensible visual identity system, following its recent logo refresh. Bo Niu is positioned as a key asset to connect with users, foster community, and convey brand warmth in everyday contexts.

marsbit6 хв тому

TRON Refreshes the Bull Image, Creating a More Approachable Brand Character

TRON's official mascot "BONiu" (Wave Bull) has received a comprehensive visual upgrade. Retaining its core red-and-white color scheme, horned silhouette, and brand DNA, the refreshed character features larger, brighter eyes, more expressive facial details including a mouth with a small fang, and enhanced emotive capabilities. The redesign aims to strengthen the mascot's亲和力, emotional expressiveness, and adaptability across various scenarios. Key updates include a clearer facial structure for instant recognition, a simplified and more intuitive五官 design, and the integration of subtle brand language. The cheek blushes are now inspired by a "signal" icon, while the smile and chest lines form a stable "T" structure, creating a cohesive超级符号 for the brand. The character has also been equipped with a 12-phoneme lip-sync system to support future动画 and interactive content. Beyond its visual role, BONiu's persona has been enriched. Now titled "TRON's Chief Luck Officer," it carries playful personality tags like "foodie enthusiast" and "full-of-tricks," allowing it to engage with the community in a more approachable and relatable manner. This update provides a lower-barrier, emotionally warm entry point for users amidst the often technical and abstract narratives of Web3. This mascot revamp is part of TRON's ongoing effort to refine its visual asset system, following the earlier logo update. By evolving from a static visual into a dynamic, expressive brand角色, the new BONiu is positioned to become a key asset for connecting with users, building brand记忆, and conveying TRON's personality across社交传播, community互动,线下活动, and merchandise.

链捕手22 хв тому

With Labour Changing Leaders, Is the Long-Suppressed UK Crypto Market About to Turn Around?

Labour leader change: Hope for UK crypto market? With Keir Starmer's resignation as Prime Minister and Labour leader, a leadership contest has begun. Andy Burnham, the former Mayor of Greater Manchester and now the overwhelming favourite to succeed, has sparked cautious optimism within the UK cryptocurrency industry. Industry figures hope Burnham, seen as more receptive to digital assets than much of the Labour establishment, could shift the party's traditionally harder line. The leadership transition is expected to be swift, with prediction markets like Polymarket assigning a 97% probability to Burnham becoming the next Prime Minister. However, this political shift comes as a comprehensive regulatory framework for crypto, established by law earlier this year, is in its final implementation phase. The Financial Conduct Authority (FCA) is finalizing detailed rules covering trading, custody, stablecoins, and market abuse, with the full regime set to go live in October 2027. While a new Prime Minister can reshuffle ministers and adjust policy priorities, the core regulatory architecture is now law and unlikely to be fundamentally overturned without significant, deliberate government intervention. The main industry hope is that a Burnham government, focusing on economic growth, will ensure the FCA's implementation is pragmatic and growth-oriented. Industry advocates seek proportionate capital requirements, a streamlined licensing process, and clear rules for staking and stablecoins. They argue that embracing the crypto sector could attract investment and listings to London's struggling markets. Despite the optimism, concerns remain that regulatory implementation may still be influenced by more sceptical factions within the Labour party.

Foresight News51 хв тому

With Labour Changing Leaders, Is the Long-Suppressed UK Crypto Market About to Turn Around?

Foresight News51 хв тому

Торгівля

Спот

Ф'ючерси