Gem Pad 代幣 Launchpad 駭客攻擊導致 Munch 協議、Nutcoin 生態系統等的流動性流失

鏈上研究顯示，Gem Pad 代幣啟動板正在發布可疑交易。該代幣發行和銷售平台的收益估計為 220 萬美元。

A recent Gem Pad token launchpad exploit has seen suspicious transactions flagged by on-chain research, with the platform used for token launches and sales being drained to the tune of an estimated $2.2 million.

最近的 Gem Pad 代幣啟動板漏洞利用鏈上研究發現了可疑交易，用於代幣發行和銷售的平台被消耗了約 220 萬美元。

Gem Pad has been posting suspicious transactions, which have led to an exploit across multiple chains and tokens. The Gem Pad team quickly stepped in to mitigate the hack, stating that several security locks were breached.

Gem Pad 一直在發布可疑交易，這導致了跨多個鍊和代幣的攻擊。 Gem Pad 團隊迅速介入以緩解駭客攻擊，並表示多個安全鎖被攻破。

IMPORTANT ANNOUNCEMENT

重要公告

As some of you may have noticed, an incident occurred last night where someone managed to breach our security locks.

你們中的一些人可能已經注意到，昨晚發生了一起事件，有人設法破壞了我們的安全鎖。

We immediately contacted all of our partners and experts in the space to investigate and resolve the situation. The issue has now been…

我們立即聯繫了該領域的所有合作夥伴和專家，以調查並解決該問題。現在的問題已經是…

— ?????d (@TheGemPad) December 17, 2024

- ?????d (@TheGemPad) 2024 年 12 月 17 日

The reason for the attack, according to code analysts, was a reentrancy on one of the functions that creates a token lock. The malicious token transfer allowed the attacker to get back the liquidity from several projects.

據程式碼分析師稱，這次攻擊的原因是對創建令牌鎖的函數之一的重入。惡意代幣轉移使攻擊者能夠從多個項目中收回流動性。

The tokens affected were from three major chains – Ethereum, Base, and BNB Smart Chain. The flawed entry point was the GempadLock smart contract, which lacked reentrancy protection.

受影響的代幣來自三大鏈——以太坊、Base和BNB智能鏈。有缺陷的入口點是 GempadLock 智能合約，它缺乏重入保護。

The exploit occurred despite a recent audit by Cyberscope, which gave Gem Pad a high security score, although the flaw was present within a single function in one smart contract.

儘管 Cyber​​scope 最近進行了一次審計，但漏洞仍然存在，該漏洞存在於一份智能合約的單一函數中，該審計為 Gem Pad 提供了很高的安全評分。

Following the news of the exploit, the GEMS token slowly retraced to $0.11. The native token of the Gem Pad platform had already declined in the second half of 2024 and now trades at around $0.11.

漏洞利用消息傳出後，GEMS 代幣緩慢回落至 0.11 美元。 Gem Pad 平台的原生代幣在 2024 年下半年已經下跌，目前交易價格約為 0.11 美元。

Gem Pad projects face fallout from stolen tokens

Gem Pad 計畫面臨代幣被盜的影響

The attacker drained the Gem Pad security locks, which were then swapped for ETH and BNB before being consolidated. According to Gem Pad, only a few projects were affected, and the platform is now secure and back online, except for the Locker service, which will remain unavailable until further notice.

攻擊者耗盡了 Gem Pad 安全鎖，然後將其交換為 ETH 和 BNB，然後進行合併。據 Gem Pad 稱，只有少數項目受到影響，該平台現已安全並重新上線，但 Locker 服務除外，該服務將保持不可用，直至另行通知。

On Gem Pad, token locks are the smart contracts that hold some of the tokens transparently to ensure that they cannot be sold in a rug pull. Launchpads continue to be a tool for distributing new tokens, along with the meme token markets. Launchpad volumes have declined, but Gem Pad has managed to attract a portfolio of projects.

在 Gem Pad 上，代幣鎖是一種智慧合約，透明地持有一些代幣，以確保它們不會被隨意出售。 Launchpad 和 Meme 代幣市場一樣，仍然是分發新代幣的工具。 Launchpad 的數量有所下降，但 Gem Pad 成功吸引了一系列專案。

While Gem Pad itself is not compromised, it remained the central point of failure due to the logic in its smart contract, and the affected projects and communities ultimately absorbed the losses.

雖然 Gem Pad 本身並未受到損害，但由於其智能合約的邏輯，它仍然是失敗的中心點，受影響的項目和社區最終承擔了損失。

Five projects hit by drained liquidity

五個項目面臨流動性枯竭

One of the projects that had their token lock attacked was Munch Protocol. However, the protocol stated that its funds were safe and not affected and could be recovered with Gem Pad’s help. Munch Protocol tokens are not yet traded and did not feel the secondary effects of the hack. The protocol did not mention how it managed to keep its funds safe or whether it absorbed any direct losses.

Munch Protocol 是遭受代幣鎖定攻擊的項目之一。然而，該協議表示其資金是安全的，沒有受到影響，並且可以在 Gem Pad 的幫助下收回。 Munch Protocol 代幣尚未進行交易，也沒有感受到駭客攻擊的二次影響。該協議沒有提及它如何設法確保資金安全，也沒有提及它是否吸收了任何直接損失。

Another project hit by the lock attack was The Nutcoin Ecosystem, which had all of its liquidity drained on Ethereum. At one point, four transactions of 100 ETH were sent directly to Tornado Cash, rendering them essentially unrecoverable.

另一個遭受鎖定攻擊的項目是堅果幣生態系統，該系統的所有流動性都在以太坊上被耗盡。有一次，四筆 100 ETH 的交易被直接發送到 Tornado Cash，導致它們基本上無法恢復。

Anon was another project that had its liquidity drained, with $3.6 million in value being exposed. The Anon community on Base was not affected, and personal wallets were safe. While $2.2 million has been accounted for to date, there could be a larger final tally for all tokens lost.

Anon 是另一個流動性耗盡的項目，價值 360 萬美元被揭露。 Base 上的 Anon 社群沒有受到影響，個人錢包也很安全。雖然迄今為止已查明 220 萬美元，但所有遺失的代幣的最終統計數字可能更大。

FOMO Network also stated that its liquidity pool on the launchpad was drained, causing the native FOMO token to crash from $0.004 to $0.00098. The hack also affected the newly launched DUB token by one of Alien Base DEX’s partners, a trading app on the Base chain.

FOMO Network 也表示，其啟動板上的流動性池已耗盡，導致原生 FOMO 代幣從 0.004 美元暴跌至 0.00098 美元。這次駭客攻擊也影響了 Alien Base DEX 合作夥伴之一新推出的 DUB 代幣，這是 Base 鏈上的交易應用程式。

The hack also impacted the liquidity for BPAY tokens, which the attacker sent directly to Uniswap V2 before transforming the haul into WETH. Immediately following the news, BPAY crashed by 75%, falling from $0.004 to $0.001.

這次駭客攻擊也影響了 BPAY 代幣的流動性，攻擊者將其直接發送到 Uniswap V2，然後將其轉換為 WETH。消息傳出後，BPAY 暴跌 75%，從 0.004 美元跌至 0.001 美元。

Although the Gem Pad hack was relatively minor in terms of the funds stolen, the secondary effects wiped even more liquidity from the market. The loss could also further damage the integrity of the affected tokens and projects.

儘管 Gem Pad 駭客事件所造成的資金被盜相對較小，但其附帶影響卻消除了市場上更多的流動性。損失還可能進一步損害受影響代幣和項目的完整性。

The attack occurred as Gem Pad was ramping up its activity on Base and posting more content to drive investors to its launchpad projects, with several new launches expected in the coming days, although no word yet on the new method for locking up liquidity.

這次攻擊發生之際，Gem Pad 正在加大Base 上的活動力度，並發布更多內容以吸引投資者參與其Launchpad 項目，預計未來幾天將推出幾項新項目，但目前還沒有關於鎖定流動性的新方法的消息。

Land a High-Paying Web3 Job in 90 Days: The Ultimate Roadmap

90 天內找到一份高薪 Web3 工作：終極路線圖