DeFi 漏洞：据报道资金被耗尽 23 万美元

根据区块链安全平台 TenArmor 9 月 23 日发布的帖子，黑客于 9 月 22 日攻击了去中心化金融协议 Bankroll Network

Decentralized finance protocol Bankroll Network was reportedly attacked on Sept. 22, with the attacker draining $230,000 from the protocol, according to a Sept. 23 X post from blockchain security platform TenArmor.

据区块链安全平台 TenArmor 9 月 23 日发布的帖子称，去中心化金融协议 Bankroll Network 于 9 月 22 日遭到攻击，攻击者从该协议中损失了 23 万美元。

TenArmor posted an image of the attack transactions, which shows numerous transfers of BNB from a BankrollNetworkStack contract to itself, each worth $9,679,645.51.

TenArmor 发布了攻击交易的图像，其中显示了从 BankrollNetworkStack 合约到自身的大量 BNB 转账，每笔价值 9,679,645.51 美元。

Two other transfers are for $9,435,877.94, one of which comes from a PancakeSwap exchange pool and is sent to an account ending in “47D7,” while the other comes from the “47D7” account and is sent to the BankrollNetworkStack contract.

另外两笔转账金额为 9,435,877.94 美元，其中一笔来自 PancakeSwap 交易池，发送至以“47D7”结尾的账户，另一笔来自“47D7”账户，发送至 BankrollNetworkStack 合约。

The difference between the self-transfers and the transfer to the account is $243,767.57, which is approximately equal to the $235,000 stated as the loss amount.

自转和转入账户之间的差额为 243,767.57 美元，大约等于所列损失金额 235,000 美元。

Given this information, the attacker may have exploited a vulnerability that allowed them to withdraw more than they deposited and used flash loans to make the initial deposit.

根据这些信息，攻击者可能利用了一个漏洞，允许他们提取的金额超过存入的金额，并使用闪电贷进行初始存款。

Blockchain data confirms that the transfers happened at 4:50 pm UTC on Sept. 22. Cointelegraph contacted the Bankroll Network team via Telegram but did not receive a response by the time of publication.

区块链数据证实，转账发生在世界标准时间 9 月 22 日下午 4:50。Cointelegraph 通过 Telegram 联系了 Bankroll Network 团队，但截至发稿时尚未收到回复。

DeFi exploits are a frequent cause of losses to Web3 users. Users should carefully research a protocol’s security before using it. Protocols that are audited by reputable smart contract security firms are more likely to be secure, although this cannot 100% guarantee that vulnerabilities don’t exist.

DeFi 漏洞是造成 Web3 用户损失的常见原因。用户在使用协议之前应仔细研究协议的安全性。经过信誉良好的智能合约安全公司审核的协议更有可能是安全的，尽管这不能 100% 保证不存在漏洞。

Bankroll Network has not confirmed that this transaction is an exploit, and security researchers may report new information about it as their investigations continue. This is a developing story and may be updated over time.

Bankroll Network 尚未确认此交易是否为漏洞，安全研究人员可能会在调查继续时报告有关此交易的新信息。这是一个正在发展的故事，可能会随着时间的推移而更新。