無限批准漏洞使 DeFi 行業面臨新風​​險，LI.FI 遭受 1000 萬美元損失

LI.FI 洩漏凸顯了 DeFi 領域保持警覺和主動採取安全措施的重要性。

A preliminary breach was detected on the Ethereum blockchain and rapidly expanded to the Arbitrum community. In keeping with Cyvers safety agency, over $10 million in stablecoins, primarily USDC and USDT, had been stolen throughout this assault. Shortly after, the attackers started changing these stablecoins into ETH.

在以太坊區塊鏈上發現了初步漏洞，並迅速擴展到 Arbitrum 社群。據 Cyvers 安全機構稱，在這次攻擊中，超過 1000 萬美元的穩定幣（主要是 USDC 和 USDT）被盜。不久之後，攻擊者開始將這些穩定幣兌換成 ETH。

The LI.FI protocol group confirmed the breach after the safety agency reported the incident. They said that the first vulnerability was coming from an infinite approval setting for transactions, which enabled attackers to steal all of the funds.

在安全機構報告該事件後，LI.FI 協議小組確認了此違規行為。他們表示，第一個漏洞來自交易的無限批准設置，這使得攻擊者能夠竊取所有資金。

Tips on how to Defend Your self From Infinite Approval Exploit

關於如何保護自己免受無限批准利用的提示

Infinite approval exploits happen when customers grant limitless permission for a wise contract to entry their funds. Whereas that is handy for repeated transactions with out requiring consumer affirmation every time, it additionally opens up important safety dangers. If the good contract or platform is compromised, attackers can use it to empty all funds from customers.

當客戶授予明智合約無限的許可來進入他們的資金時，就會發生無限的批准漏洞。雖然這對於重複交易很方便，無需每次都需要消費者確認，但它也帶來了嚴重的安全隱患。如果良好的合約或平台遭到破壞，攻擊者就可以利用它來清空客戶的所有資金。

LI.FI claimed that no additional funds had been in danger, whereas Cyvers urged customers to revoke approvals for the compromised addresses instantly. Instruments resembling Revoke.money will help customers handle and revoke token approvals simply.

LI.FI 聲稱沒有其他資金處於危險之中，而 Cyvers 則敦促客戶立即撤銷對受損地址的批准。 Revoke.money 等工具將幫助客戶輕鬆處理和撤銷代幣批准。

Customers ought to commonly verify their token approvals and revoke any which might be pointless or pose a possible danger. As an alternative of granting infinite approval, customers can set limits on the quantity a wise contract can entry. This fashion, even when a breach happens, the potential loss is capped.

客戶應該經常驗證他們的代幣批准，並撤銷任何可能毫無意義或構成可能危險的代幣批准。作為授予無限批准的替代方案，客戶可以對智能合約可以輸入的數量設定限制。這樣，即使發生違規，潛在的損失也受到限制。

Whereas DeFi protocols should guarantee sturdy safety measures, customers additionally bear accountability for his or her safety settings. By following these steps, customers can restrict the chance of falling sufferer to hacks.

儘管 DeFi 協議應保證可靠的安全措施，但使用者也對其安全設定承擔責任。透過遵循這些步驟，客戶可以減少遭受駭客攻擊的機會。