ParaSwap 客戶因合約漏洞造成資金損失，損失慘重

ParaSwap 的 AugustusV6 合約漏洞允許駭客於 3 月 18 日竊取批准用戶的資金。作為回應，ParaSwap DAO 投票決定從其金庫中賠償受害者，獲得了 96.81% 的支持。儘管迅速採取行動追回資產，但還是損失了 864,000 美元。 ParaSwap 與 TRM Labs 和 Chainaanalysis 合作追蹤被盜資金，最終於 4 月 4 日追回 50 萬美元。

ParaSwap Customers Reimbursed for Losses After Contract Vulnerability Exploitation

ParaSwap 客戶已獲得合約漏洞利用造成的損失賠償

A critical vulnerability in the recently released ParaSwap AugustusV6 contract resulted in unauthorized access to customer funds, prompting the decentralized finance (DeFi) aggregator to pledge reimbursement from its treasury.

最近發布的 ParaSwap AugustusV6 合約中的一個嚴重漏洞導致未經授權存取客戶資金，促使去中心化金融 (DeFi) 聚合商承諾從其財務部門進行補償。

The Contract Vulnerability and Hack

合約漏洞和駭客攻擊

On March 18, ParaSwap deployed its AugustusV6 contract, designed to enhance swap efficiency and reduce gas fees. However, a significant flaw within the contract enabled hackers to exploit user approvals, siphoning funds from their accounts.

3 月 18 日，ParaSwap 部署了 AugustusV6 合約，旨在提高交換效率並降低 Gas 費用。然而，合約中的一個重大缺陷使駭客能夠利用用戶的批准，從他們的帳戶中竊取資金。

Swift Action and Recovery

迅速行動和恢復

Swift action by the ParaSwap team, in partnership with blockchain analytics firms TRM Labs and Chainalysis, led to a rapid rewind of the contract, salvaging approximately $3.4 million in assets. This process, however, incurred costs of around $864,000.

ParaSwap 團隊與區塊鏈分析公司 TRM Labs 和 Chainaanalysis 合作迅速採取行動，導致合約迅速撤銷，挽救了約 340 萬美元的資產。然而，這一過程產生了約 864,000 美元的成本。

Treasury-Funded Reimbursements

財政部資助的報銷

On April 4, the ParaSwap decentralized autonomous organization (DAO) proposed a reimbursement plan for affected customers, leveraging the project's treasury funds. Over 96% of users approved the proposal after a three-day voting period.

4 月 4 日，ParaSwap 去中心化自治組織 (DAO) 利用該計畫的國庫資金，為受影響的客戶提出了補償計畫。經過三天的投票期，超過 96% 的用戶批准了該提案。

Transparency and Recovery

透明度和恢復

ParaSwap CEO Mounir Benchemled praised the community's support and transparency throughout the incident. The company disclosed the recovery of approximately $500,000 worth of stolen assets on April 4, significantly reducing the outstanding balance.

ParaSwap 執行長 Mounir Benchemled 讚揚了社區在整個事件中的支持和透明度。該公司於 4 月 4 日披露，已追回價值約 50 萬美元的被盜資產，顯著減少了未清餘額。

Long-Term Resilience

長期彈性

ParaSwap emphasized the importance of customer reimbursement in ensuring the long-term viability of the project. The incident highlighted the inherent risks associated with DeFi protocols and the need for robust security measures.

ParaSwap 強調了客戶報銷對於確保專案長期生存的重要性。該事件凸顯了與 DeFi 協議相關的固有風險以及強有力的安全措施的必要性。

Industry-Wide Impact

全行業的影響

The ParaSwap security breach underscores the ongoing challenges faced by the DeFi sector. Despite industry advancements in blockchain security, vulnerabilities remain a persistent threat.

ParaSwap 安全漏洞凸顯了 DeFi 領域持續面臨的挑戰。儘管區塊鏈安全領域取得了行業進步，但漏洞仍然是一個持續的威脅。

March Hack Recovered

三月駭客事件已恢復

According to blockchain security startup PeckShield, approximately $100 million worth of digital assets stolen in the March hack have been recovered. Notably, 52.8% of the stolen funds, primarily originating from a security breach affecting the Munchables NFT game, have been retrieved.

據區塊鏈安全新創公司 PeckShield 稱，在 3 月的駭客攻擊中被盜的價值約 1 億美元的數位資產已被追回。值得注意的是，52.8% 的被盜資金（主要源自影響 Munchables NFT 遊戲的安全漏洞）已被追回。

Conclusion

結論

The ParaSwap contract vulnerability and subsequent customer reimbursements serve as a reminder of the ongoing evolution of DeFi security and the importance of swift and transparent responses to security breaches. The industry continues to grapple with the challenges of mitigating risk while fostering innovation and accessibility.

ParaSwap 合約漏洞和隨後的客戶賠償提醒人們，DeFi 安全性正在不斷發展，以及對安全漏洞做出快速、透明反應的重要性。該行業繼續應對降低風險的挑戰，同時促進創新和可及性。