Truebit 的 TRU 代币在价值 2600 万美元的以太币被盗后崩溃,暴露了遗留智能合约漏洞。这对 DeFi 世界来说是一个鲜明的提醒。

Another Day, Another Digital Dollar Disappears
又一天,又一个数字美元消失了
Well, folks, grab a cuppa and settle in. It seems the wild, wired world of decentralized finance just served up another stark reminder of its volatile nature. This time, the spotlight’s on Truebit, an Ethereum-based project that watched its TRU token plummet nearly 99.9% faster than a hot dog vendor closing shop on a rainy Tuesday. The culprit? A sophisticated hacker, who, with a flair for the dramatic, drained approximately 8,535 Ether – a cool $26.6 million – from the protocol’s reserves. It’s a story as old as time, or at least as old as five-year-old smart contracts.
好吧,伙计们,喝杯茶,安顿下来吧。去中心化金融的狂野、有线世界似乎再次鲜明地提醒人们其不稳定的本质。这次,焦点集中在 Truebit,这是一个基于以太坊的项目,该项目的 TRU 代币暴跌速度比热狗供应商在下雨的星期二关门的速度快了近 99.9%。罪魁祸首?一位经验丰富的黑客,凭借戏剧性的天赋,从协议的储备中耗尽了大约 8,535 个以太币——相当于 2660 万美元。这是一个与时间一样古老的故事,或者至少与五年前的智能合约一样古老。
The Glitch in the Old Machine: How the Ether Vanished
旧机器的故障:以太币是如何消失的
According to the digital detectives at Lookonchain and independent researchers like Weilin Li, this wasn’t some cutting-edge, never-before-seen trick. No, this was a classic case of an antique vulnerability. The attacker exploited a flaw in an *older* smart contract, deployed roughly half a decade ago. Imagine that: code from 2021 coming back to bite you in 2026. This particular old-timer had a minting function that, under just the right (or wrong) conditions, would essentially give away TRU tokens for free. Our resourceful hacker then repeatedly bought these 'free' tokens and immediately sold them back into the protocol’s reserve, steadily siphoning off Ether with each transaction. They even reportedly paid a small 'builder bribe' to ensure their transactions got VIP treatment, like getting the best table at a crowded restaurant.
根据 Lookonchain 的数字侦探和李伟林等独立研究人员的说法,这不是什么尖端的、前所未见的伎俩。不,这是一个古老漏洞的典型案例。攻击者利用了大约五年前部署的“较旧”智能合约中的缺陷。想象一下:2021 年的代码会在 2026 年回来咬你。这个特殊的老前辈有一个铸造功能,在正确(或错误)的条件下,基本上会免费赠送 TRU 代币。然后,我们足智多谋的黑客反复购买这些“免费”代币,并立即将它们卖回协议的储备中,在每笔交易中稳步吸走以太币。据报道,他们甚至向“建筑商行贿”,以确保他们的交易得到 VIP 待遇,比如在拥挤的餐厅获得最好的餐桌。
Market Mayhem and a Muted Response
市场混乱和反应冷淡
As word spread, the TRU token’s price did a swan dive, leaving many investors with holdings worth less than a subway token. Liquidity evaporated, and panic selling ensued. Truebit, for its part, acknowledged the
随着消息传开,TRU 代币的价格大幅跳水,许多投资者持有的代币价值还低于地铁代币。流动性蒸发,恐慌性抛售随之而来。 Truebit 则承认