Zabu Finance izkoriščali na plazu za 3.2 milijona dolarjev

Decentralizirane finance (Defi) protocol Zabu has been exploited in what appears to be the first major hack in the Avalanche ecosystem.

12. septembra, industrijska hiša DeFiPrime tweeted da je bil Zabu Finance izkoriščen za 3.2 milijona dolarjev, kar bi lahko bil prvi večji napad na Avalanche.

Protokolu je sledil lasten tvit, ki potrjuje izkoriščanje in da so bila sredstva ukradena iz bazena SPORE;

“Zabu Team denarnica has not sold a single Zabu. We’re under an exploit, possibly from Spore Pool. We’re investigating the exploit. Need help,”

It added that the attacker exploited the “Transfer Tax” mechanism of the protocol to mint tokens causing the price to collapse. The attacker manipulated a vulnerability in the contract used by yield farms to distribute rewards. Varnost podjetje PeckShield komentiral "Enaka napaka se je že večkrat zgodila,"

Posnetek, zaženi v2, pojdi naprej

Zabu Finance, which describes itself as a full-stack Defi station on Avalanche, explained that the attacker interacted with the contract to remove 4.5 billion ZABU tokens to accrue liquidity provider tokens in other farms on the Avalanche Pangolin and Trader Joe DEXes. Those were then sold as the hacker made off with the loot.

Zabu je nagrade postavil na nič, da bi lahko uporabniki dvignili sredstva, potem ko so ugotovili, da so bile kmetije Zabu izkoriščene. Ekipa zdaj namerava narediti posnetek pred vdorom, poiskati pa bo tudi rešitev za tiste, ki so kupili po izkoriščanju.

Razdelil bo žetone ZABU v2 prizadetim in kmetijo znova zagnal kot v2 z bazenom vložkov Zabu v1 za tiste, ki so se vključili po krampu.

»Na ta način bodo ljudje, ki so izgubili denar pred vdorom, razdelili žetone in še naprej podpirali protokol, če bodo želeli. Za poznega kupca (post-hack) lahko sodelujejo tudi na kmetiji V2 tako, da vložijo kupljeno v zbirko za vložke Zabu V1. "

Cene ZABU se zrušijo

The removal of so many ZABU tokens caused prices to collapse to zero (or close to it). They were trading at around $0.004 on Sunday and are pretty much worthless today ($0.00002) according to CoinGecko.

 Zabu Finance is the latest in a long list of dubious DeFi protocols that have been exploited in 2021. According to Baza podatkov REKT podjetja DeFiYield, $1.6 billion has been lost to similar hacks, prevare, and rug pulls over the past 5 years.