已失效的 DeFi 協議洩露了被黑池中的加密貨幣資金

據報道，駭客透過針對 Arbitrum 區塊鏈上的智慧合約的漏洞，從 DeFi 借貸平台 Yield Protocol 竊取了約 181,000 美元的加密貨幣。儘管該平台因挑戰和監管壓力而於 2023 年 12 月關閉，但攻擊還是發生了，暴露了攻擊者利用的代幣池餘額與總供應量之間的差異。

Hackers Exploit Yield Protocol Smart Contracts for Cryptocurrency Theft

駭客利用收益協議智能合約進行加密貨幣盜竊

Washington, D.C. - Hackers have successfully exploited smart contracts from the now-defunct decentralized finance (DeFi) lending platform Yield Protocol, resulting in the theft of approximately $181,000 worth of cryptocurrency assets.

華盛頓特區 - 駭客成功利用了現已解散的去中心化金融 (DeFi) 借貸平台 Yield Protocol 的智能合約，導致價值約 181,000 美元的加密貨幣資產被盜。

The incident, which was initially reported by blockchain investigation firm PeckShield and later confirmed by cybersecurity company CertiK, occurred on the Arbitrum blockchain. PeckShield noticed suspicious activity and alerted Yield Protocol, which had closed down its operations in December 2023 due to market demand challenges and regulatory pressures.

這起事件最初由區塊鏈調查公司 PeckShield 報告，後來得到網路安全公司 CertiK 的證實，發生在 Arbitrum 區塊鏈上。 PeckShield 注意到可疑活動，並向 Yield Protocol 發出警報，由於市場需求挑戰和監管壓力，該協議已於 2023 年 12 月關閉其業務。

CertiK's investigation revealed that the attacker took advantage of a discrepancy between the pool token balance and total supply using flash-loaned assets, thereby enabling the withdrawal of additional pool tokens. The exact mechanism of the exploit and the identity of the attacker remain under investigation.

CertiK 的調查顯示，攻擊者利用閃貸資產，利用礦池代幣餘額與總供應量之間的差異，從而提取額外的礦池代幣。該漏洞的確切機制和攻擊者的身分仍在調查中。

According to experts, the hack occurred despite Yield Protocol's repeated warnings to investors to close their positions, withdraw funds, and settle outstanding loans before its closure. However, the lack of official support for the protocol since February 2, 2024, has diminished the likelihood of recovering the stolen funds.

據專家稱，儘管 Yield Protocol 多次警告投資者在關閉前平倉、提取資金並結清未償貸款，但駭客還是發生了。然而，自 2024 年 2 月 2 日以來，該協議缺乏官方支持，降低了追回被盜資金的可能性。

In March 2023, Yield Protocol was one of several DeFi protocols that suffered losses due to an attack on the Euler Finance lending platform. The protocol subsequently collaborated with Euler to restore funds and recover from the incident by deploying new contracts and executing permissioned calls.

2023 年 3 月，Yield Protocol 是因 Euler Finance 借貸平台遭受攻擊而遭受損失的多個 DeFi 協議之一。該協議隨後與 Euler 合作，透過部署新合約和執行許可調用來恢復資金並從事件中恢復。

As the DeFi ecosystem continues to evolve, the importance of robust security measures to prevent unauthorized access and protect user assets cannot be overstated. Industry experts recommend that users exercise caution when interacting with DeFi protocols and closely monitor their accounts for any suspicious activity.

隨著 DeFi 生態系統的不斷發展，強而有力的安全措施對於防止未經授權的存取和保護使用者資產的重要性怎麼強調也不為過。行業專家建議用戶在與 DeFi 協議互動時保持謹慎，並密切監控其帳戶是否存在任何可疑活動。

About Yield Protocol

關於收益協議

Yield Protocol was a decentralized lending platform that allowed users to borrow and lend crypto assets without the need for intermediaries. It was launched in 2021 and gained popularity among DeFi users due to its innovative yield farming strategies. However, the platform encountered challenges related to business demand and regulatory compliance, leading to its closure in December 2023.

Yield Protocol 是一個去中心化借貸平台，允許用戶在不需要中介的情況下借入和借出加密資產。它於 2021 年推出，因其創新的流動性挖礦策略而受到 DeFi 用戶的歡迎。然而，該平台遇到了業務需求和監管合規方面的挑戰，導致其於 2023 年 12 月關閉。

About PeckShield

關於派克盾

PeckShield is a leading blockchain investigation firm that provides security audits, real-time monitoring, and incident response services to the DeFi community. The company has a proven track record of identifying and reporting vulnerabilities in DeFi protocols, helping to enhance the security of the ecosystem.

PeckShield 是一家領先的區塊鏈調查公司，為 DeFi 社群提供安全審計、即時監控和事件回應服務。該公司在識別和報告 DeFi 協議漏洞方面擁有良好的記錄，有助於增強生態系統的安全性。

About CertiK

關於CertiK

CertiK is a global leader in blockchain security, providing formal verification and security audits for blockchain protocols and smart contracts. The company's mission is to secure the Web3 ecosystem and protect digital assets by ensuring the reliability and integrity of blockchain-based applications.

CertiK 是區塊鏈安全領域的全球領導者，為區塊鏈協議和智慧合約提供形式化驗證和安全審計。該公司的使命是透過確保基於區塊鏈的應用程式的可靠性和完整性來保護 Web3 生態系統並保護數位資產。