Исследователи Halborn: протокол BetterBank на базе Pulsechain потерял $5 млн из-за взлома

cryptonews.ruОпубліковано о 2025-06-02Востаннє оновлено о 2025-09-03

В августе 2025 года кредитный протокол BetterBank, работающий на сети Pulsechain, подвергся крупной атаке. Подробности нападения рассказали специалисты компании Halborn. Хакеры использовали уязвимость в системе начисления бонусов, что позволило им вывести средства на сумму $5 млн. Инцидент стал одним из крупнейших для экосистемы и вновь показал слабые места в управлении логикой вознаграждений в DeFi-протоколах.

Механизм атаки основывался на создании поддельных торговых пар. Злоумышленники сформировали пары из токена FAVOR и собственного бесполезного актива. При совершении массовых сделок система начисляла им огромные бонусы в ESTEEM-криптовалютах. Дополнительно проблему усугубляло то, что налоговые правила протокола применялись только к официальным парам. В итоге хакеры смогли обойти оплату комиссионных и эффективно обнулить защитные механизмы.

После обнаружения атаки команда BetterBank остановила торговлю и заявила, что сумела договориться с хакером. В результате около 550 млн pDAI было возвращено на смарт-контракт. Однако ущерб в $5 млн потряс экспертов, а доверие пользователей к платформе оказалось серьезно подорвано.

Особое внимание привлек тот факт, что уязвимость ранее была зафиксирована во время аудита. Эксперты безопасности описали сценарий атаки, но использовали в примере тестовый эфир вместо неликвидного токена. По этой причине разработчики посчитали атаку финансово нереализуемой и понизили ее статус с «критического» до «низкого». Патч, предложенный аудиторами, внедрен не был.

Таким образом, ситуация с BetterBank показала, что даже наличие аудита не гарантирует безопасность протокола, если выводы специалистов интерпретируются неправильно. Неполное понимание рисков и снижение их приоритета в итоге стоили протоколу миллионов долларов. Инцидент стал наглядным примером, как недооцененные предупреждения могут обернуться катастрофическими последствиями.

Пов'язані матеріали

CFTC Chairman Reveals Plans: The Next Frontier, Crypto, Computing Power Markets, and Prediction Markets

CFTC Chairman Michael S. Selig outlined a regulatory roadmap targeting three new frontiers: crypto assets, AI compute power, and prediction markets. Regarding crypto, while preferring comprehensive legislation like the CLARITY Act, the CFTC is preparing to use its existing authority to potentially designate platforms as regulated "Crypto Asset Markets" if Congress fails to act. For AI, the focus is on developing markets for GPU compute power, treating it as a tradable commodity for price discovery and risk management. For prediction markets, the CFTC is moving beyond the "gambling" debate to propose specific rules for event contracts, focusing on product listing standards, market manipulation prevention, and retail investor protection. The chairman emphasized a consistent philosophy: establishing clear regulatory frameworks is essential for fostering responsible innovation in these emerging financial areas.

marsbit31 хв тому

CFTC Chairman Reveals Plans: The Next Frontier, Crypto, Computing Power Markets, and Prediction Markets

marsbit31 хв тому

Nethermind Moves Cross-Chain Node Operations From LayerZero To Chainlink CCIP

Ethereum engineering firm Nethermind has ceased its participation as a Decentralized Verifier Network (DVN) participant for LayerZero and will now operate its cross-chain node operations on Chainlink's Cross-Chain Interoperability Protocol (CCIP). As a well-known infrastructure provider, Nethermind's decision adds a credible name to CCIP's operator set, bolstering Chainlink's positioning as a secure, institutionally-focused interoperability standard. The move highlights the increasing scrutiny on cross-chain security and the importance of trusted node operators. However, it represents one major provider's infrastructure choice based on its own priorities and risk assessment, not a market-wide replacement. LayerZero remains a prominent player in the competitive cross-chain messaging landscape. The significance of Nethermind's migration will be clearer if other operators follow suit, potentially strengthening CCIP's position. For now, it signifies a notable credibility boost for Chainlink's cross-chain offering while the broader interoperability race continues.

bitcoinist34 хв тому

Nethermind Moves Cross-Chain Node Operations From LayerZero To Chainlink CCIP

bitcoinist34 хв тому

JPMorgan Research Report Analysis: Moderna's INT Trial Meets Endpoints, but Market Already Priced In

On August 19, J.P. Morgan (JPM) published a research report analyzing Moderna's recent Phase III trial success for its Individualized Neoantigen Therapy (INT), developed in partnership with Merck, in adjuvant melanoma. The trial met its primary endpoint of significantly improved recurrence-free survival and the key secondary endpoint of distant metastasis-free survival. While JPM acknowledged the strong clinical value of these results, particularly the prevention of distant metastasis, the bank stated that this success was widely anticipated, with an 85% prior probability of success, and is already reflected in Moderna's current market valuation. Following the announcement, Moderna's stock rose in pre-market trading. However, JPM maintained its Underweight rating and $40 price target, implying approximately 36% downside from the current price of ~$63. The core rationale is that the success in adjuvant melanoma, a relatively small market in immuno-oncology, is fully priced in. Moderna's future valuation hinges entirely on INT's ability to demonstrate similar efficacy across broader cancer indications. JPM's valuation model incorporates only a modest risk-adjusted value (~$3/share) for the melanoma approval. Approximately $15/share of its target price is attributed to INT's potential in other cancer types. The report identifies upcoming data readouts in non-melanoma cancers (e.g., lung, head & neck, renal) as the critical variable that will determine the platform's ultimate value. Upside risks include better-than-expected data in these new indications, while downside risks involve clinical failures, regulatory delays, or commercial underperformance. In conclusion, JPM views the pre-market stock move as driven by short covering and trading sentiment rather than a fundamental re-rating. The bank remains bearish, arguing that Moderna must now prove INT's efficacy as a platform technology beyond melanoma to justify its current market cap.

marsbit37 хв тому

JPMorgan Research Report Analysis: Moderna's INT Trial Meets Endpoints, but Market Already Priced In

marsbit37 хв тому

Treasury Department Directly Intervenes to Suppress Long-Term Interest Rates

The article discusses the U.S. Treasury's recent direct intervention to suppress long-term bond yields through buyback operations. While distinct from traditional Yield Curve Control (YCC), this move is interpreted as direct government intervention in its own financing costs. The author emphasizes the short-term tactical nature of this action and contrasts it with the Federal Reserve's upcoming, potentially divergent, policy stance at Jackson Hole. The core issue is framed as a long-term U.S. strategic dilemma: managing high deficit levels. The analysis argues that deficit reduction cannot realistically come from spending cuts or traditional industries, but must rely on achieving higher economic growth driven by technological breakthroughs. Current monetary tightening, while possibly curbing yields and inflation in the short term, is seen as potentially counterproductive to this necessary long-term investment in technology and supply chain resilience. The piece draws historical parallels, placing the current intervention between the 2000-2002 Treasury buybacks (for liquidity) and larger-scale Fed-led "Operation Twist" maneuvers. The effectiveness of the Treasury's action is deemed limited without Federal Reserve cooperation, which would signify a more significant policy shift. Ultimately, the author views such technical, bureaucratic interventions as treating symptoms rather than the underlying disease of the U.S. economy's structural challenges and "K-shaped" divergence. The conclusion suggests that sustained yield suppression by the Fed, combined with specific geopolitical outcomes, could serve as a catalyst for a more profound discussion on broader U.S. and dollar trajectory.

marsbit37 хв тому

Treasury Department Directly Intervenes to Suppress Long-Term Interest Rates

marsbit37 хв тому

With 319 Million Shares Facing Lifting of Trading Restrictions, Why Did SpaceX Drop Nearly 5% Intraday?

SpaceX's second round of post-IPO lock-up shares was lifted on August 20th, with approximately 319 million shares held by insiders becoming eligible for trading. The sudden potential expansion of the tradable share float led to a near 5% intraday drop in the stock price, as short-term supply pressure temporarily outweighed the market's long-term enthusiasm for its rocket, satellite, and AI infrastructure businesses.

1 год тому

With 319 Million Shares Facing Lifting of Trading Restrictions, Why Did SpaceX Drop Nearly 5% Intraday?

1 год тому

Торгівля

Спот