主要质押平台遭受 200 万美元的攻击后，Bedrock 面临安全挑战

主要质押平台 Bedrock 最近面临因 bug 导致的安全漏洞，允许用户将 1 ETH 兑换为 1 BTC。

Major staking platform Bedrock has encountered a security issue, specifically a bug, that allowed users to exchange 1 ETH for 1 BTC. This vulnerability, which affected the platform's synthetic Bitcoin token (uniBTC), led to an estimated loss of $2 million in digital assets.

主要质押平台 Bedrock 遇到了安全问题，特别是一个错误，该错误允许用户将 1 ETH 兑换为 1 BTC。该漏洞影响了该平台的合成比特币代币 (uniBTC)，预计导致数字资产损失 200 万美元。

The presence of the bug was confirmed by Bedrock in a statement on September 27 via its X (formerly Twitter) account. The issue centered around uniBTC, a synthetic Bitcoin used within the decentralized finance (DeFi) ecosystem. However, due to a flaw left over from a previous implementation involving uniETH, users were able to trade Bitcoin and Ethereum at a 1:1 ratio, despite their significant price difference.

Bedrock 在 9 月 27 日通过其 X（以前的 Twitter）帐户发表声明证实了该漏洞的存在。该问题围绕 uniBTC，这是一种在去中心化金融（DeFi）生态系统中使用的合成比特币。然而，由于之前涉及 uniETH 的实施留下的缺陷，用户能够以 1:1 的比例交易比特币和以太坊，尽管它们的价格差异很大。

At the time of the exploit, Bitcoin was trading at around $65,449, while Ethereum was valued at $2,659. This disparity created a loophole that some users exploited to gain an unfair advantage, resulting in financial losses for the platform.

漏洞发生时，比特币的交易价格约为 65,449 美元，而以太坊的交易价格为 2,659 美元。这种差异造成了一些用户利用漏洞来获得不公平的优势，从而导致平台遭受经济损失。

However, Bedrock has since acted to resolve the issue and reassure users about the safety of their funds. The platform's team swiftly fixed the bug and confirmed that the majority of users' funds were secure. According to the company, most of the losses occurred in decentralized exchange liquidity pools rather than core assets like wrapped Bitcoin or standard Bitcoin reserves.

不过，Bedrock 此后已采取行动解决该问题，并向用户保证资金安全。该平台团队迅速修复了该错误，并确认大多数用户的资金是安全的。据该公司称，大部分损失发生在去中心化交易所流动性池中，而不是像包装比特币或标准比特币储备这样的核心资产。

The platform is now working on a reimbursement plan for affected users and aims to recover as many lost funds as possible. Additionally, Bedrock plans to release a detailed post-mortem report outlining the incident, explaining how the breach occurred, and what steps will be taken to prevent similar vulnerabilities in the future. This transparency is part of their efforts to maintain trust within the community.

该平台目前正在为受影响的用户制定补偿计划，旨在追回尽可能多的损失资金。此外，Bedrock 计划发布一份详细的事后分析报告，概述该事件，解释漏洞是如何发生的，以及将来将采取哪些措施来防止类似的漏洞。这种透明度是他们维持社区信任的努力的一部分。

So far, Bedrock's rapid response has helped reassure the platform's users, although the incident poses a significant challenge for a company that has only been operating since February 2023. The platform was designed by Singapore-based blockchain firm RockX to offer liquid staking to institutional investors, with a focus on regulatory compliance, including know-your-customer (KYC) and anti-money laundering (AML) requirements.

到目前为止，Bedrock 的快速反应帮助该平台的用户放心，尽管该事件对一家自 2023 年 2 月才开始运营的公司构成了重大挑战。该平台由新加坡区块链公司 RockX 设计，旨在向机构投资者提供流动性质押，重点关注监管合规性，包括了解你的客户 (KYC) 和反洗钱 (AML) 要求。

Despite the setback, Bedrock remains a major player in the decentralized finance space, currently ranking as the eighth-largest liquid staking protocol, with over $240 million in total value locked (TVL) on its platform. This status highlights Bedrock's importance within the DeFi ecosystem, but it also serves as a reminder that even well-regulated platforms are not exempt from security risks.

尽管遭遇挫折，Bedrock 仍然是去中心化金融领域的主要参与者，目前排名第八大流动质押协议，其平台上锁定的总价值 (TVL) 超过 2.4 亿美元。这一状态凸显了 Bedrock 在 DeFi 生态系统中的重要性，但它也提醒我们，即使监管良好的平台也不能免除安全风险。

The company is now working closely with auditors to investigate the root cause of the vulnerability. While no further user action is required, Bedrock has stated that additional security measures will be implemented to prevent similar issues in the future.

该公司目前正在与审计人员密切合作，调查该漏洞的根本原因。虽然不需要用户采取进一步行动，但 Bedrock 表示将实施额外的安全措施，以防止将来出现类似问题。

This incident serves as a valuable lesson for the entire DeFi space: even platforms designed with institutional investors in mind must remain attentive to the security of their systems. As Bedrock works to restore its reputation and compensate affected users, the breach highlights the continuous need for strong security measures in the world of decentralized finance.

这一事件对整个 DeFi 领域来说是一个宝贵的教训：即使是为机构投资者设计的平台也必须始终关注其系统的安全性。随着 Bedrock 努力恢复声誉并赔偿受影响的用户，此次泄露凸显了去中心化金融领域持续需要强有力的安全措施。