在主要質押平台遭受 200 萬美元的攻擊後，Bedrock 面臨安全挑戰

主要質押平台 Bedrock 最近面臨因 bug 導致的安全漏洞，允許用戶將 1 ETH 兌換為 1 BTC。

Major staking platform Bedrock has encountered a security issue, specifically a bug, that allowed users to exchange 1 ETH for 1 BTC. This vulnerability, which affected the platform's synthetic Bitcoin token (uniBTC), led to an estimated loss of $2 million in digital assets.

主要質押平台 Bedrock 遇到了安全問題，特別是一個錯誤，該錯誤允許用戶將 1 ETH 兌換為 1 BTC。該漏洞影響了該平台的合成比特幣代幣 (uniBTC)，預計導致數位資產損失 200 萬美元。

The presence of the bug was confirmed by Bedrock in a statement on September 27 via its X (formerly Twitter) account. The issue centered around uniBTC, a synthetic Bitcoin used within the decentralized finance (DeFi) ecosystem. However, due to a flaw left over from a previous implementation involving uniETH, users were able to trade Bitcoin and Ethereum at a 1:1 ratio, despite their significant price difference.

Bedrock 在 9 月 27 日透過其 X（以前的 Twitter）帳戶發表聲明證實了該漏洞的存在。這個問題圍繞著 uniBTC，這是一種在去中心化金融（DeFi）生態系統中使用的合成比特幣。然而，由於先前涉及 uniETH 的實施留下的缺陷，用戶能夠以 1:1 的比例交易比特幣和以太坊，儘管它們的價格差異很大。

At the time of the exploit, Bitcoin was trading at around $65,449, while Ethereum was valued at $2,659. This disparity created a loophole that some users exploited to gain an unfair advantage, resulting in financial losses for the platform.

漏洞發生時，比特幣的交易價格約為 65,449 美元，而以太坊的交易價格為 2,659 美元。這種差異造成了一些用戶利用漏洞來獲得不公平的優勢，導致平台遭受經濟損失。

However, Bedrock has since acted to resolve the issue and reassure users about the safety of their funds. The platform's team swiftly fixed the bug and confirmed that the majority of users' funds were secure. According to the company, most of the losses occurred in decentralized exchange liquidity pools rather than core assets like wrapped Bitcoin or standard Bitcoin reserves.

不過，Bedrock 此後已採取行動解決該問題，並向用戶保證資金安全。該平台團隊迅速修復了該錯誤，並確認大多數用戶的資金是安全的。據該公司稱，大部分損失發生在去中心化交易所流動性池中，而不是像包裝比特幣或標準比特幣儲備這樣的核心資產。

The platform is now working on a reimbursement plan for affected users and aims to recover as many lost funds as possible. Additionally, Bedrock plans to release a detailed post-mortem report outlining the incident, explaining how the breach occurred, and what steps will be taken to prevent similar vulnerabilities in the future. This transparency is part of their efforts to maintain trust within the community.

該平台目前正在為受影響的用戶制定補償計劃，旨在追回盡可能多的損失資金。此外，Bedrock 計劃發布一份詳細的事後分析報告，概述該事件，解釋漏洞是如何發生的，以及將來將採取哪些措施來防止類似的漏洞。這種透明度是他們維持社區信任的努力的一部分。

So far, Bedrock's rapid response has helped reassure the platform's users, although the incident poses a significant challenge for a company that has only been operating since February 2023. The platform was designed by Singapore-based blockchain firm RockX to offer liquid staking to institutional investors, with a focus on regulatory compliance, including know-your-customer (KYC) and anti-money laundering (AML) requirements.

到目前為止，Bedrock 的快速反應幫助該平台的用戶放心，儘管該事件對一家自2023 年2 月才開始運營的公司構成了重大挑戰。投資者提供流動性質押，重點關注監管合規性，包括了解你的客戶 (KYC) 和反洗錢 (AML) 要求。

Despite the setback, Bedrock remains a major player in the decentralized finance space, currently ranking as the eighth-largest liquid staking protocol, with over $240 million in total value locked (TVL) on its platform. This status highlights Bedrock's importance within the DeFi ecosystem, but it also serves as a reminder that even well-regulated platforms are not exempt from security risks.

儘管遭遇挫折，Bedrock 仍然是去中心化金融領域的主要參與者，目前排名第八大流動質押協議，其平台上鎖定的總價值 (TVL) 超過 2.4 億美元。這一狀態凸顯了 Bedrock 在 DeFi 生態系統中的重要性，但它也提醒我們，即使監管良好的平台也不能免除安全風險。

The company is now working closely with auditors to investigate the root cause of the vulnerability. While no further user action is required, Bedrock has stated that additional security measures will be implemented to prevent similar issues in the future.

該公司目前正在與審計人員密切合作，調查漏洞的根本原因。雖然不需要用戶採取進一步行動，但 Bedrock 表示將實施額外的安全措施，以防止將來出現類似問題。

This incident serves as a valuable lesson for the entire DeFi space: even platforms designed with institutional investors in mind must remain attentive to the security of their systems. As Bedrock works to restore its reputation and compensate affected users, the breach highlights the continuous need for strong security measures in the world of decentralized finance.

這一事件對整個 DeFi 領域來說是一個寶貴的教訓：即使是為機構投資者設計的平台也必須始終關注其係統的安全性。隨著 Bedrock 努力恢復聲譽並賠償受影響的用戶，這次外洩凸顯了去中心化金融領域持續需要強有力的安全措施。