Yield Protocol 失效合約被利用，導致 18.1 萬美元加密貨幣損失

當駭客利用其失效的智能合約竊取 Arbitrum 區塊鏈上價值約 181,000 美元的加密資產時，Yield Protocol 遭受了重大挫折。這次攻擊針對的是封閉式 DeFi 借貸平台中長期存在的漏洞，凸顯了 DeFi 生態系統中持續存在的風險。

Yield Protocol's Defunct Contracts Exploited, Resulting in $181,000 Crypto Loss

Yield Protocol 失效合約被利用，導致 181,000 美元的加密貨幣損失

Arlington, VA (April 30, 2024) - Yield Protocol, a once-prominent decentralized finance (DeFi) lending platform that halted operations in late 2023, has fallen victim to a devastating exploit that has cost investors approximately $181,000 worth of crypto assets.

維吉尼亞州阿靈頓（2024 年4 月30 日） - Yield Protocol 是一個曾經著名的去中心化金融(DeFi) 借貸平台，於2023 年底停止運營，現已成為毀滅性漏洞的受害者，導致投資者損失了價值約181,000 美元的加密資產。

The exploit, which was discovered by Certik Alert and corroborated by blockchain sleuths PeckShield, took advantage of lingering vulnerabilities in Yield Protocol's defunct smart contracts. Despite repeated warnings for investors to close their positions and withdraw their funds, an unidentified attacker capitalized on the protocol's compromised state.

該漏洞由 Certik Alert 發現，並得到區塊鏈偵探 PeckShield 的證實，它利用了 Yield Protocol 已失效的智能合約中長期存在的漏洞。儘管一再警告投資者平倉並撤回資金，但身份不明的攻擊者還是利用了協議的受損狀態。

Certik's investigation revealed that the attacker manipulated the balance and total supply of pool tokens through flash-loaned assets, allowing them to siphon off extra pool tokens. This exploit highlights the persistent risks that can lurk within DeFi ecosystems, especially when protocols cease operations and lose official support.

Certik 的調查顯示，攻擊者透過閃貸資產操縱了礦池代幣的餘額和總供應量，使他們能夠吸走額外的礦池代幣。這個漏洞凸顯了 DeFi 生態系統中可能潛伏的持續風險，尤其是當協議停止運作並失去官方支援時。

Compounding the losses incurred by Yield Protocol's remaining stakeholders, the protocol's efforts to recover the stolen funds have been rendered futile due to the lack of ongoing support since February 2. This latest breach echoes a similar incident in March 2023, when Yield Protocol was one of several DeFi platforms affected by an attack on Euler Finance. However, in that instance, Yield Protocol managed to recover and restore its functionality.

由於自2 月2 日以來缺乏持續支持，Yield Protocol 的剩餘利益相關者所遭受的損失更加嚴重。發生的類似事件相呼應，當時Yield Protocol 是其中之一。然而，在這種情況下，Yield Protocol 設法恢復並恢復其功能。

Meanwhile, a report from blockchain security firm Immunefi suggests a modest decline in hacking and fraud incidents in the first quarter of 2024 compared to the previous year. Immunefi's data indicates a 23% decrease in losses, with Q1 of 2024 witnessing approximately $336.3 million lost to cybercriminal activities, down from $437.5 million in the corresponding quarter of 2023. The report also identified 46 hacking incidents and 15 fraudulent activities during the period.

同時，區塊鏈安全公司 Immunefi 的報告顯示，與前一年相比，2024 年第一季的駭客和詐欺事件略有下降。 Immunefi 的數據顯示，損失減少了23%，2024 年第一季網路犯罪活動造成的損失約為3.363 億美元，低於2023 年同期的4.375 億美元。事件和15 起詐欺活動。

Despite the decline in overall losses, the cross-chain bridge protocol Orbit Bridge suffered the most significant single loss of $81.7 million, highlighting the diverse vulnerabilities that exist across different crypto projects.

儘管整體損失有所下降，但跨鏈橋協議 Orbit Bridge 遭受了最重大的單筆損失，達 8,170 萬美元，凸顯了不同加密項目中存在的各種漏洞。

As DeFi continues to evolve, it is imperative for investors to remain vigilant and take appropriate measures to protect their assets. Thorough research, due diligence, and a clear understanding of the risks involved are essential for navigating the ever-changing landscape of decentralized finance.

隨著 DeFi 的不斷發展，投資者必須保持警惕並採取適當措施來保護自己的資產。徹底的研究、盡職調查以及對所涉及風險的清晰了解對於駕馭不斷變化的去中心化金融格局至關重要。