非對稱研究幫助 Circle 識別並修復可能導致巨大損失的錯誤

區塊鏈網路安全公司 Asymmetry Research 幫助 Circle 發現了一個錯誤，如果不解決該錯誤可能會導致巨大損失。

Blockchain cybersecurity firm Asymmetric Research has helped Circle identify a critical vulnerability that could've led to massive losses if not addressed. The vulnerability resided in Circle's Cross-Chain Transfer Protocol (CCTP) deployed on the Cosmos network, enabling the bridging of the firm's USDC stablecoin.

區塊鏈網路安全公司 Asymmetry Research 幫助 Circle 發現了一個嚴重漏洞，如果不解決該漏洞可能會導致巨大損失。該漏洞存在於 Cosmos 網路上部署的 Circle 跨鏈傳輸協定（CCTP）中，可實現該公司 USDC 穩定幣的橋接。

Asymmetric discovered the vulnerability in the noble-cctp module of the CCTP, which is used for cross-chain USDC transfers on the Cosmos-based Noble chain. The vulnerability allowed anyone to send a message to the CCTP, instructing it to burn (destroy) a specific amount of USDC tokens on the Cosmos Hub.

Asymmetry 發現了 CCTP 的 Nobel-cctp 模組中的漏洞，該模組用於在基於 Cosmos 的 Noble 鏈上進行跨鏈 USDC 轉帳。該漏洞允許任何人向 CCTP 發送訊息，指示其在 Cosmos Hub 上銷毀（銷毀）特定數量的 USDC 代幣。

However, due to a faulty verification process, the CCTP would instead mint (create) the specified amount of USDC tokens on the Noble chain. This vulnerability could've been exploited to mint an "infinite" amount of USDC tokens on the Noble chain, as observed by Asymmetric.

然而，由於驗證過程錯誤，CCTP 會在 Noble 鏈上鑄造（創建）指定數量的 USDC 代幣。正如 Asymmetry 所觀察到的，該漏洞可能被利用在 Noble 鏈上鑄造「無限」數量的 USDC 代幣。

“We privately disclosed a vulnerability to Circle via their bug bounty program,” the security firm noted in its report. “Notably, no malicious exploitation took place, and no user funds were lost. Circle promptly took action, once notified, to fix the bug.”

該安全公司在報告中指出：“我們通過其漏洞賞金計劃私下向 Circle 披露了一個漏洞。” 「值得注意的是，沒有發生惡意利用，也沒有用戶資金損失。 Circle 在收到通知後立即採取行動修復該錯誤。

The vulnerability could've enabled malicious actors to exploit the message sender verification process of the Noble Bridge, which is designed to ensure that only authorized parties (such as the TokenMessenger) can trigger USDC burns on the Cosmos Hub.

該漏洞可能使惡意行為者能夠利用 Noble Bridge 的訊息發送者驗證過程，該過程旨在確保只有授權方（例如 TokenMessenger）才能觸發 Cosmos Hub 上的 USDC 銷毀。

This verification process is crucial to prevent unauthorized mints of USDC on the Noble chain. However, the verification was not being performed correctly, allowing anyone to send a message to the CCTP, instructing it to burn USDC on the Cosmos Hub.

此驗證過程對於防止在 Noble 鏈上未經授權鑄造 USDC 至關重要。然而，驗證並未正確執行，任何人都可以向 CCTP 發送訊息，指示其在 Cosmos Hub 上銷毀 USDC。

As a result, an attacker could've exploited this vulnerability and triggered malicious USDC mints by sending a fake BurnMessage directly through a CCTP MessageTransmitter contract, using the noble-cctp module address and noble's chainid as the CCTP destination.

因此，攻擊者可以利用此漏洞，透過使用 Nobel-cctp 模組位址和 Nobel 的 chainid 作為 CCTP 目的地，直接透過 CCTP MessageTransmitter 合約發送虛假 BurnMessage 來觸發惡意 USDC 鑄幣。

“However, we did not identify any evidence of exploitation,” Asymmetric stated in its findings, adding that the vulnerability was patched quickly by Circle.

「但是，我們沒有發現任何利用的證據，」Asymmetry 在其調查結果中表示，並補充說該漏洞已被 Circle 迅速修復。

Infinite Money Glitch at First Assumption

第一次假設時的無限金錢故障

Asymmetric initially observed that attackers could've exploited this vulnerability to mint as many USDC tokens as they wanted, which seemed like an "infinite money glitch" at first glance.

Asymmetry 最初觀察到，攻擊者可以利用此漏洞鑄造任意數量的 USDC 代幣，乍一看這似乎是一個「無限金錢故障」。

However, upon further investigation, they discovered that Noble enforced a mint limit of around 35 million USDC, preventing attackers from minting an unlimited amount of tokens. While this mint limit significantly reduced the potential impact of the vulnerability, it remained a critical issue that needed to be addressed promptly.

然而，經過進一步調查，他們發現 Noble 強制實施了約 3500 萬個 USDC 的鑄造限制，以防止攻擊者無限量地鑄造代幣。雖然這項薄荷限制顯著降低了漏洞的潛在影響，但它仍然是一個需要立即解決的關鍵問題。

Fortunately, thanks to Asymmetric's discovery and Circle's swift response, the vulnerability was patched before any malicious exploitation occurred. Additionally, no tokens were minted out of thin air, and no Noble Bridge users lost their funds.

幸運的是，由於 Asymmetry 的發現和 Circle 的迅速響應，該漏洞在任何惡意利用發生之前就得到了修補。此外，沒有任何代幣是憑空鑄造的，Noble Bridge 用戶也沒有損失資金。

This incident highlights the importance of regular security audits and vulnerability scanning to identify and address potential risks in blockchain protocols and applications, especially those handling large volumes of user funds.

這一事件凸顯了定期安全審計和漏洞掃描的重要性，以識別和解決區塊鏈協議和應用程式中的潛在風險，特別是那些處理大量用戶資金的協議和應用程式。