DeFi 漏洞：據報道資金被耗盡 23 萬美元

根據區塊鏈安全平台 TenArmor 9 月 23 日發布的帖子，駭客於 9 月 22 日攻擊了去中心化金融協議 Bankroll Network

Decentralized finance protocol Bankroll Network was reportedly attacked on Sept. 22, with the attacker draining $230,000 from the protocol, according to a Sept. 23 X post from blockchain security platform TenArmor.

根據區塊鏈安全平台 TenArmor 9 月 23 日發布的貼文稱，去中心化金融協議 Bankroll Network 於 9 月 22 日遭到攻擊，攻擊者從該協議中損失了 23 萬美元。

TenArmor posted an image of the attack transactions, which shows numerous transfers of BNB from a BankrollNetworkStack contract to itself, each worth $9,679,645.51.

TenArmor 發布了攻擊交易的圖像，其中顯示了從 BankrollNetworkStack 合約到自身的大量 BNB 轉賬，每筆價值 9,679,645.51 美元。

Two other transfers are for $9,435,877.94, one of which comes from a PancakeSwap exchange pool and is sent to an account ending in “47D7,” while the other comes from the “47D7” account and is sent to the BankrollNetworkStack contract.

另外兩筆轉帳金額為 9,435,877.94 美元，其中一筆來自 PancakeSwap 交易池，發送至以「47D7」結尾的帳戶，另一筆來自「47D7」帳戶，發送至 BankrollNetworkStack 合約。

The difference between the self-transfers and the transfer to the account is $243,767.57, which is approximately equal to the $235,000 stated as the loss amount.

自轉和轉入帳戶之間的差額為 243,767.57 美元，約等於所列損失金額 235,000 美元。

Given this information, the attacker may have exploited a vulnerability that allowed them to withdraw more than they deposited and used flash loans to make the initial deposit.

根據這些信息，攻擊者可能利用了一個漏洞，允許他們提取的金額超過存入的金額，並使用閃電貸進行初始存款。

Blockchain data confirms that the transfers happened at 4:50 pm UTC on Sept. 22. Cointelegraph contacted the Bankroll Network team via Telegram but did not receive a response by the time of publication.

區塊鏈數據證實，轉帳發生在世界標準時間 9 月 22 日下午 4:50。

DeFi exploits are a frequent cause of losses to Web3 users. Users should carefully research a protocol’s security before using it. Protocols that are audited by reputable smart contract security firms are more likely to be secure, although this cannot 100% guarantee that vulnerabilities don’t exist.

DeFi 漏洞是造成 Web3 用戶損失的常見原因。用戶在使用協議之前應仔細研究協議的安全性。經過信譽良好的智能合約安全公司審核的協議更有可能是安全的，儘管這不能 100% 保證不存在漏洞。

Bankroll Network has not confirmed that this transaction is an exploit, and security researchers may report new information about it as their investigations continue. This is a developing story and may be updated over time.

Bankroll Network 尚未確認此交易是否為漏洞，安全研究人員可能會在調查繼續時報告有關此交易的新資訊。這是一個正在發展的故事，可能會隨著時間的推移而更新。