Gem Pad 代币 Launchpad 黑客攻击导致 Munch 协议、Nutcoin 生态系统等的流动性流失

链上研究显示，Gem Pad 代币启动板正在发布可疑交易。该代币发行和销售平台的收益估计为 220 万美元。

A recent Gem Pad token launchpad exploit has seen suspicious transactions flagged by on-chain research, with the platform used for token launches and sales being drained to the tune of an estimated $2.2 million.

最近的 Gem Pad 代币启动板漏洞利用链上研究发现了可疑交易，用于代币发行和销售的平台被消耗了约 220 万美元。

Gem Pad has been posting suspicious transactions, which have led to an exploit across multiple chains and tokens. The Gem Pad team quickly stepped in to mitigate the hack, stating that several security locks were breached.

Gem Pad 一直在发布可疑交易，这导致了跨多个链和代币的攻击。 Gem Pad 团队迅速介入以缓解黑客攻击，并表示多个安全锁被攻破。

IMPORTANT ANNOUNCEMENT

重要公告

As some of you may have noticed, an incident occurred last night where someone managed to breach our security locks.

你们中的一些人可能已经注意到，昨晚发生了一起事件，有人设法破坏了我们的安全锁。

We immediately contacted all of our partners and experts in the space to investigate and resolve the situation. The issue has now been…

我们立即联系了该领域的所有合作伙伴和专家，以调查并解决该问题。现在的问题已经是……

— ?????d (@TheGemPad) December 17, 2024

- ?????d (@TheGemPad) 2024 年 12 月 17 日

The reason for the attack, according to code analysts, was a reentrancy on one of the functions that creates a token lock. The malicious token transfer allowed the attacker to get back the liquidity from several projects.

据代码分析师称，此次攻击的原因是对创建令牌锁的函数之一的重入。恶意代币转移使攻击者能够从多个项目中收回流动性。

The tokens affected were from three major chains – Ethereum, Base, and BNB Smart Chain. The flawed entry point was the GempadLock smart contract, which lacked reentrancy protection.

受影响的代币来自三大链——以太坊、Base和BNB智能链。有缺陷的入口点是 GempadLock 智能合约，它缺乏重入保护。

The exploit occurred despite a recent audit by Cyberscope, which gave Gem Pad a high security score, although the flaw was present within a single function in one smart contract.

尽管 Cyber​​scope 最近进行了一次审计，但该漏洞仍然存在，该漏洞存在于一份智能合约的单个函数中，该审计给 Gem Pad 提供了很高的安全评分。

Following the news of the exploit, the GEMS token slowly retraced to $0.11. The native token of the Gem Pad platform had already declined in the second half of 2024 and now trades at around $0.11.

漏洞利用消息传出后，GEMS 代币缓慢回落至 0.11 美元。 Gem Pad 平台的原生代币在 2024 年下半年已经下跌，目前交易价格约为 0.11 美元。

Gem Pad projects face fallout from stolen tokens

Gem Pad 项目面临代币被盗的影响

The attacker drained the Gem Pad security locks, which were then swapped for ETH and BNB before being consolidated. According to Gem Pad, only a few projects were affected, and the platform is now secure and back online, except for the Locker service, which will remain unavailable until further notice.

攻击者耗尽了 Gem Pad 安全锁，然后将其交换为 ETH 和 BNB，然后进行合并。据 Gem Pad 称，只有少数项目受到影响，该平台现已安全并重新上线，但 Locker 服务除外，该服务将保持不可用，直至另行通知。

On Gem Pad, token locks are the smart contracts that hold some of the tokens transparently to ensure that they cannot be sold in a rug pull. Launchpads continue to be a tool for distributing new tokens, along with the meme token markets. Launchpad volumes have declined, but Gem Pad has managed to attract a portfolio of projects.

在 Gem Pad 上，代币锁是一种智能合约，透明地持有一些代币，以确保它们不会被随意出售。 Launchpad 和 Meme 代币市场一样，仍然是分发新代币的工具。 Launchpad 的数量有所下降，但 Gem Pad 成功吸引了一系列项目。

While Gem Pad itself is not compromised, it remained the central point of failure due to the logic in its smart contract, and the affected projects and communities ultimately absorbed the losses.

虽然 Gem Pad 本身并未受到损害，但由于其智能合约的逻辑，它仍然是失败的中心点，受影响的项目和社区最终承担了损失。

Five projects hit by drained liquidity

五个项目面临流动性枯竭

One of the projects that had their token lock attacked was Munch Protocol. However, the protocol stated that its funds were safe and not affected and could be recovered with Gem Pad’s help. Munch Protocol tokens are not yet traded and did not feel the secondary effects of the hack. The protocol did not mention how it managed to keep its funds safe or whether it absorbed any direct losses.

Munch Protocol 是遭受代币锁定攻击的项目之一。然而，该协议表示其资金是安全的，没有受到影响，并且可以在 Gem Pad 的帮助下收回。 Munch Protocol 代币尚未进行交易，也没有感受到黑客攻击的二次影响。该协议没有提及它如何设法保证资金安全，也没有提及它是否吸收了任何直接损失。

Another project hit by the lock attack was The Nutcoin Ecosystem, which had all of its liquidity drained on Ethereum. At one point, four transactions of 100 ETH were sent directly to Tornado Cash, rendering them essentially unrecoverable.

另一个遭受锁定攻击的项目是坚果币生态系统，该系统的所有流动性都在以太坊上被耗尽。有一次，四笔 100 ETH 的交易被直接发送到 Tornado Cash，导致它们基本上无法恢复。

Anon was another project that had its liquidity drained, with $3.6 million in value being exposed. The Anon community on Base was not affected, and personal wallets were safe. While $2.2 million has been accounted for to date, there could be a larger final tally for all tokens lost.

Anon 是另一个流动性耗尽的项目，价值 360 万美元被暴露。 Base 上的 Anon 社区没有受到影响，个人钱包也很安全。虽然迄今为止已查明 220 万美元，但所有丢失的代币的最终统计数字可能更大。

FOMO Network also stated that its liquidity pool on the launchpad was drained, causing the native FOMO token to crash from $0.004 to $0.00098. The hack also affected the newly launched DUB token by one of Alien Base DEX’s partners, a trading app on the Base chain.

FOMO Network 还表示，其启动板上的流动性池已耗尽，导致原生 FOMO 代币从 0.004 美元暴跌至 0.00098 美元。此次黑客攻击还影响了 Alien Base DEX 合作伙伴之一新推出的 DUB 代币，这是 Base 链上的一款交易应用程序。

The hack also impacted the liquidity for BPAY tokens, which the attacker sent directly to Uniswap V2 before transforming the haul into WETH. Immediately following the news, BPAY crashed by 75%, falling from $0.004 to $0.001.

这次黑客攻击还影响了 BPAY 代币的流动性，攻击者将其直接发送到 Uniswap V2，然后将其转换为 WETH。消息传出后，BPAY 暴跌 75%，从 0.004 美元跌至 0.001 美元。

Although the Gem Pad hack was relatively minor in terms of the funds stolen, the secondary effects wiped even more liquidity from the market. The loss could also further damage the integrity of the affected tokens and projects.

尽管 Gem Pad 黑客事件所造成的资金被盗相对较小，但其附带影响却消除了市场上更多的流动性。损失还可能进一步损害受影响代币和项目的完整性。

The attack occurred as Gem Pad was ramping up its activity on Base and posting more content to drive investors to its launchpad projects, with several new launches expected in the coming days, although no word yet on the new method for locking up liquidity.

此次攻击发生之际，Gem Pad 正在加大在 Base 上的活动力度，并发布更多内容以吸引投资者参与其 Launchpad 项目，预计未来几天将推出几项新项目，但目前还没有关于锁定流动性的新方法的消息。

Land a High-Paying Web3 Job in 90 Days: The Ultimate Roadmap

90 天内找到一份高薪 Web3 工作：终极路线图