已失效的 DeFi 协议泄露了被黑池中的加密货币资金

据报道，黑客通过针对 Arbitrum 区块链上的智能合约的漏洞，从 DeFi 借贷平台 Yield Protocol 窃取了约 181,000 美元的加密货币。尽管该平台因挑战和监管压力而于 2023 年 12 月关闭，但攻击还是发生了，暴露了攻击者利用的代币池余额与总供应量之间的差异。

Hackers Exploit Yield Protocol Smart Contracts for Cryptocurrency Theft

黑客利用收益协议智能合约进行加密货币盗窃

Washington, D.C. - Hackers have successfully exploited smart contracts from the now-defunct decentralized finance (DeFi) lending platform Yield Protocol, resulting in the theft of approximately $181,000 worth of cryptocurrency assets.

华盛顿特区 - 黑客成功利用了现已解散的去中心化金融 (DeFi) 借贷平台 Yield Protocol 的智能合约，导致价值约 181,000 美元的加密货币资产被盗。

The incident, which was initially reported by blockchain investigation firm PeckShield and later confirmed by cybersecurity company CertiK, occurred on the Arbitrum blockchain. PeckShield noticed suspicious activity and alerted Yield Protocol, which had closed down its operations in December 2023 due to market demand challenges and regulatory pressures.

该事件最初由区块链调查公司 PeckShield 报告，后来得到网络安全公司 CertiK 的证实，发生在 Arbitrum 区块链上。 PeckShield 注意到可疑活动，并向 Yield Protocol 发出警报，由于市场需求挑战和监管压力，该协议已于 2023 年 12 月关闭其业务。

CertiK's investigation revealed that the attacker took advantage of a discrepancy between the pool token balance and total supply using flash-loaned assets, thereby enabling the withdrawal of additional pool tokens. The exact mechanism of the exploit and the identity of the attacker remain under investigation.

CertiK 的调查显示，攻击者利用闪贷资产，利用矿池代币余额与总供应量之间的差异，从而提取额外的矿池代币。该漏洞的确切机制和攻击者的身份仍在调查中。

According to experts, the hack occurred despite Yield Protocol's repeated warnings to investors to close their positions, withdraw funds, and settle outstanding loans before its closure. However, the lack of official support for the protocol since February 2, 2024, has diminished the likelihood of recovering the stolen funds.

据专家称，尽管 Yield Protocol 多次警告投资者在关闭前平仓、提取资金并结清未偿贷款，但黑客还是发生了。然而，自 2024 年 2 月 2 日以来，该协议缺乏官方支持，降低了追回被盗资金的可能性。

In March 2023, Yield Protocol was one of several DeFi protocols that suffered losses due to an attack on the Euler Finance lending platform. The protocol subsequently collaborated with Euler to restore funds and recover from the incident by deploying new contracts and executing permissioned calls.

2023 年 3 月，Yield Protocol 是因 Euler Finance 借贷平台遭受攻击而遭受损失的多个 DeFi 协议之一。该协议随后与 Euler 合作，通过部署新合约和执行许可调用来恢复资金并从事件中恢复。

As the DeFi ecosystem continues to evolve, the importance of robust security measures to prevent unauthorized access and protect user assets cannot be overstated. Industry experts recommend that users exercise caution when interacting with DeFi protocols and closely monitor their accounts for any suspicious activity.

随着 DeFi 生态系统的不断发展，强有力的安全措施对于防止未经授权的访问和保护用户资产的重要性怎么强调也不为过。行业专家建议用户在与 DeFi 协议交互时保持谨慎，并密切监控其账户是否存在任何可疑活动。

About Yield Protocol

关于收益协议

Yield Protocol was a decentralized lending platform that allowed users to borrow and lend crypto assets without the need for intermediaries. It was launched in 2021 and gained popularity among DeFi users due to its innovative yield farming strategies. However, the platform encountered challenges related to business demand and regulatory compliance, leading to its closure in December 2023.

Yield Protocol 是一个去中心化借贷平台，允许用户在不需要中介的情况下借入和借出加密资产。它于 2021 年推出，因其创新的流动性挖矿策略而受到 DeFi 用户的欢迎。然而，该平台遇到了业务需求和监管合规方面的挑战，导致其于 2023 年 12 月关闭。

About PeckShield

关于派克盾

PeckShield is a leading blockchain investigation firm that provides security audits, real-time monitoring, and incident response services to the DeFi community. The company has a proven track record of identifying and reporting vulnerabilities in DeFi protocols, helping to enhance the security of the ecosystem.

PeckShield 是一家领先的区块链调查公司，为 DeFi 社区提供安全审计、实时监控和事件响应服务。该公司在识别和报告 DeFi 协议漏洞方面拥有良好的记录，有助于增强生态系统的安全性。

About CertiK

关于CertiK

CertiK is a global leader in blockchain security, providing formal verification and security audits for blockchain protocols and smart contracts. The company's mission is to secure the Web3 ecosystem and protect digital assets by ensuring the reliability and integrity of blockchain-based applications.

CertiK 是区块链安全领域的全球领导者，为区块链协议和智能合约提供形式化验证和安全审计。该公司的使命是通过确保基于区块链的应用程序的可靠性和完整性来保护 Web3 生态系统并保护数字资产。