# Postmortem的所有文章

在 HTX 新聞中心流覽與「Postmortem」相關的最新資訊與深度分析。潘蓋市場趨勢、專案動態、技術進展及監管政策，提供權威的加密行業洞察。

Summer.fi reveals months-long preparation behind $6M DeFi exploit

Summer.fi has detailed a $6.04 million exploit against its Lazy Summer Protocol USDC vaults, concluding it was a planned attack executed on July 6 after roughly three months of preparation. The root cause was an operational issue during the offboarding of an old strategy, not a smart contract bug. The attacker manipulated the net asset value (NAV) of two USDC vaults by donating stale-valued Silo vault tokens into an Ark that, despite being capped during offboarding, was still included in NAV calculations. This artificially inflated the vaults' share prices, allowing the attacker to redeem shares and withdraw $6.04 million. Losses were split between the Lower Risk Vault (~$5.64M) and the Higher Risk Vault (~$400k). Summer.fi emphasized the exploit did not involve compromised keys or a coding flaw. It also clarified the attack was not a simple flash loan exploit; flash loans only provided final transaction liquidity, while the attacker had accumulated the necessary assets months in advance. All protocol vaults are currently paused. Governance must now decide on compensation for affected users and when unaffected vaults can safely resume operations.

ambcrypto07/07 17:34

Summer.fi reveals months-long preparation behind $6M DeFi exploit

ambcrypto07/07 17:34

Sui Reveals What Caused Three Mainnet Halts After Major Network Upgrade

The Sui mainnet experienced three outages on May 28 and 29 following its 1.72 network upgrade. The first two halts, on Thursday and Friday morning, were caused by a bug in the new hybrid gas charging logic for address balances. A transaction cancellation due to insufficient funds could later trigger an underflow during the gas settlement process. A temporary patch was applied, but a masked error caused a repeat halt Friday morning. The third outage Friday afternoon was a separate issue triggered by a scheduled epoch change. A bug prevented validators from properly persisting the failed status of a randomness generation protocol, stalling the transition. All issues have been resolved with no risk to user funds, and network activity has resumed. The Sui Foundation cited lessons around improving epoch resilience and the critical nature of gas charging logic.

bitcoinist06/02 05:02

Sui Reveals What Caused Three Mainnet Halts After Major Network Upgrade

bitcoinist06/02 05:02

Steakhouse postmortem reveals DNS hijack caused by registrar 2FA bypass

Steakhouse's postmortem of a 30 March security incident reveals that attackers hijacked its domain through a social engineering attack on its registrar, OVHcloud. The attacker impersonated the account owner, convinced support to disable hardware-based two-factor authentication, and took full control of the account. This allowed them to redirect DNS to a phishing site with a wallet drainer for about four hours. No user funds were lost, as on-chain systems remained secure, and wallet protections quickly detected the fake site. The breach underscores the risk of off-chain infrastructure vulnerabilities and over-reliance on a single registrar. Steakhouse has since migrated registrars, enhanced DNS monitoring, and implemented stricter domain security controls.

ambcrypto04/10 19:03

Steakhouse postmortem reveals DNS hijack caused by registrar 2FA bypass

ambcrypto04/10 19:03

活动图片

熱門分類right-arrow

熱門標籤right-arrow

Ethereumright-arrow

Project Updatesright-arrow