Ошибка оракула Chainlink привела к краже более $2 млн из DeFi-протоколов

cryptonews.ruОпубліковано о 2025-11-17Востаннє оновлено о 2025-11-17

Инцидент с неправильной работой оракула Chainlink стал причиной крупной серии атак на DeFi-протоколы. Ошибка в передаче данных о цене токена wrstETH, которая временно показывала $5,8 млн вместо реальных $3000, позволила злоумышленнику провести серию эксплойтов, начав с Moonwell. По данным CertiK, хакер использовал флеш-займ на 0,02 wrstETH, внес его как залог и смог неоднократно брать кредиты более чем на 20 wstETH, в результате чего украл 295 ETH, что эквивалентно примерно $1 млн.

Эксперт под псевдонимом Dami назвал произошедшее «безумием» и возложил ответственность на Chainlink, чьи данные стали ключевым источником уязвимости. Согласно его заявлению, ошибка оракула позволила системе переоценить актив и выдать заем под завышенную стоимость. Вследствие этого смарт-контракт Moonwell непреднамеренно предоставил хакеру возможность многократного кредитования без достаточного обеспечения.

Позднее аналитик под псевдонимом Specter сообщил, что тот же атакующий ранее уже уже эксплуатировал протокол Moonwell 10 октября, когда ему удалось вывести 269 ETH (около $1 млн). Судя по всему, команда проекта не устранила уязвимость, что позволило злоумышленнику вернуться и повторно провести атаку, увеличив общие потери до более чем $2 млн.

Дополнительно стало известно, что этот же адрес был замешан в ряде аналогичных эксплойтов других лендинговых протоколов, включая Venus Protocol ($664 тыс.), TakaraLend ($450 тыс.), а также атаковал мелкие проекты вроде LobsterFi и OrbiterOne. Несмотря на схожие признаки, большинство пострадавших команд не делали официальных заявлений, что вызывает обеспокоенность у исследователей в секторе безопасности.

По данным Specter, злоумышленник действует в течение года, эксплуатируя слабые места в системах оракулов и риск-моделях DeFi-протоколов. Его стратегия основывается на поиске несанкционированных расхождений между ценовыми фидами и реальными данными, что позволяет проводить атаки без непосредственного взлома смарт-контрактов. Последний инцидент вновь поставил под сомнение надежность оракульных решений.

Трендові криптовалюти

CitreaCTR

wrapped stUSDTWSTUSDT

Velodrome FinanceVELODROME

BrevisBREV

ZRX（0X）ZRX

PancakeSwapCAKE

Пов'язані матеріали

Bitcoin consolidates near $60K – Can BTC whale demand beat ETF selling?

Bitcoin is consolidating near $60,000, with on-chain data showing whales are persistently accumulating BTC at these price levels, viewing them as attractive for long-term holdings. This whale demand has remained resilient and provides structural price support, even as their accumulation rate has moderated from previous surges. However, this bullish on-chain trend contrasts with significant and persistent outflows from Bitcoin spot ETFs, representing substantial institutional selling pressure. The key question is whether this new whale and exchange inflow demand can sufficiently counteract the ETF selling to establish a solid foundation for a price recovery. The market dynamic suggests a potential transition of ownership from weaker to stronger hands, but persistent ETF redemptions may continue to delay a clear bullish momentum shift.

ambcrypto9 хв тому

Bitcoin consolidates near $60K – Can BTC whale demand beat ETF selling?

ambcrypto9 хв тому

Valuation Inversion Emerges, Bitcoin Treasury Companies Face Trust Crisis

"Valuation Inversion Emerges, Sparking Trust Crisis for Bitcoin Treasury Firms" The investment thesis for corporate Bitcoin treasury stocks has fundamentally shifted. Investors are no longer rewarding companies simply for accumulating more Bitcoin. Instead, the focus is now on net Bitcoin per share, with intense scrutiny on whether new financings truly benefit existing shareholders or merely dilute their stake. Key indicators highlight the new reality. Metaplanet's market capitalization has fallen below the total value of its Bitcoin holdings, indicating a valuation discount. While MicroStrategy maintains a premium, its core metric—Bitcoin per diluted share for common shareholders—has been declining due to dilution from financing activities, primarily through its STRAT permanent preferred shares. This marks a transition from a pure "asset accumulation" phase to an "equity attribution" phase. Investors now deduct costs like preferred dividends and debt to calculate the actual Bitcoin claim for common equity. The widespread adoption of spot Bitcoin ETFs has removed the scarcity value these stocks once held, forcing them to justify their structure with superior leverage, dividends, or capital efficiency. European entrants like France's Capital B and Sweden's BTC AB are testing this new environment with ambitious funding plans backed by relatively small Bitcoin holdings. They are asking investors to bear complex capital structures, betting future Bitcoin purchases will cover all dilution and dividend costs. The sector's core risk is a broken financing loop. Once a company's stock trades below its Bitcoin net asset value, it loses the ability to issue equity for accretive purchases. It is then left with unpalatable choices: dilutive financing at a discount, venturing into new businesses like Bitcoin lending, or selling assets. The winners in this next phase will be those that demonstrably increase Bitcoin per share for common shareholders with every financing move.

Foresight News34 хв тому

Valuation Inversion Emerges, Bitcoin Treasury Companies Face Trust Crisis

Foresight News34 хв тому

NanoBit’s crypto scam ends in a $5.52M SEC victory – Here’s how

The U.S. Securities and Exchange Commission (SEC) secured a victory against NanoBit and related entities for operating a 'pig butchering' cryptocurrency scam between September 2023 and June 2024. Scammers used messaging apps to contact victims, promoting fraudulent initial coin offerings with promises of high returns and falsely claiming SEC registration. The U.S. District Court for the Eastern District of New York issued a final judgment against two individuals and four organizations. The court found that no actual transactions occurred on the NanoBit platform, with investor funds being misappropriated and wired overseas. All defendants received permanent injunctions for violating anti-fraud securities laws. They were ordered to pay a total of approximately $5.52 million in penalties, comprising disgorgement of illicit profits, pre-judgment interest, and civil fines. NanoBit itself owes about $1.8 million. The court noted the defendants' willful default and the absence of any meritorious defense.

ambcrypto36 хв тому

NanoBit’s crypto scam ends in a $5.52M SEC victory – Here’s how

ambcrypto36 хв тому

Claude Code Announces Major Next-Gen Upgrade: You Chat, and the Backend Gets the Job Done

Claude Code's next major upgrade will make its sub-agents run in the background by default, transforming the tool from a conversational interface into a multi-threaded workflow engine. Users can chat with Claude while sub-agents handle tasks like code refactoring, running tests, and opening PRs in parallel. Creator Boris Cherny, who hasn't written a line of code in eight months and sometimes manages thousands of AI agents, states that users are no longer just prompters; "another Claude writes the prompts." This evolution builds on recent features like Routines for scheduled tasks and Dynamic Workflows for complex, multi-agent jobs. The change signifies a shift where engineers focus on strategy and decision-making rather than writing code. Anthropic's internal data suggests Claude Code triples engineering output, creating a bottleneck for product managers who can't generate enough work. Spotify's case study reveals that 73% of its pull requests are AI-assisted, with executives using the tool to build prototypes directly from natural language descriptions. The core takeaway: the scarcest resource is no longer the ability to write code, but the ability to decide what code to write.

marsbit38 хв тому

Claude Code Announces Major Next-Gen Upgrade: You Chat, and the Backend Gets the Job Done

marsbit38 хв тому

a16z Brief: Prediction Markets Set a Record for the Third Consecutive Week, Weekly Trading Volume Surpasses $14.4 Billion for the First Time

A16z Crypto's weekly report highlights record-breaking activity in prediction markets. For the third consecutive week, total weekly trading volume hit a new all-time high, surpassing $14.4 billion for the first time, a significant jump from the $5-6 billion range seen earlier this year. Aggregate open interest also reached a new weekly record of $1.6 billion, marking its third straight week of growth. This metric, which reflects the total value of unsettled bets, has increased roughly 8-fold since last autumn, indicating sustained capital inflow. While events like the World Cup drove initial interest, growth has expanded beyond sports. Non-sports categories—including politics, economics, and geopolitics—achieved a weekly volume of $3.6 billion across platforms like Kalshi and Polymarket. This figure now exceeds the entire prediction market's weekly volume (including sports) from last year. Since July 2025, non-sports trading volume has grown approximately 18-fold, with acceleration notably steepening recently.

marsbit39 хв тому

a16z Brief: Prediction Markets Set a Record for the Third Consecutive Week, Weekly Trading Volume Surpasses $14.4 Billion for the First Time

marsbit39 хв тому

Торгівля

Спот

Обговорення

Ласкаво просимо до спільноти HTX. Тут ви можете бути в курсі останніх подій розвитку платформи та отримати доступ до професійної ринкової інформації. Нижче представлені думки користувачів щодо ціни LINK (LINK).