黄金协议的200万美元令牌崩溃：价格甲骨文噩梦

金协议的NGP代币在获得200万美元的利用后坠毁了88％。 Flash Loan攻击操纵了Price Oracle，揭示了未经审计的Defi项目中的漏洞。

Gold Protocol's $2M Token Collapse: A Price Oracle Nightmare

黄金协议的200万美元令牌崩溃：价格甲骨文噩梦

DeFi took another hit. Gold Protocol's NGP token tanked after a $2 million exploit, highlighting the dangers of unaudited projects and flawed price oracles.

Defi再次受到打击。黄金协议的NGP代币经过200万美元的利用，突出了未经审计的项目和有缺陷的价格甲骨文的危险。

Flash Loan Fuels the Fire

Flash Loan燃烧火

On September 18, 2025, New Gold Protocol, a DeFi staking project, experienced a significant security breach. An attacker siphoned off approximately 443.8 ETH, valued at $2 million, causing the project's native NGP token to plummet by 88% in less than an hour. Blockchain security firms like PeckShield and Blockaid quickly flagged the incident, confirming the stolen amount and tracking the movement of funds.

2025年9月18日，新的黄金协议是一个Defi Staking项目，经历了严重的安全漏洞。一名攻击者偷偷摸摸地分发了约443.8 ETH，价值200万美元，导致该项目的本地NGP令牌在不到一个小时的时间内下降了88％。像Peckshield和Blockaid这样的区块链安全公司迅速标记了这一事件，确认了被盗金额并跟踪资金的移动。

Blockaid's analysis pointed to a price oracle manipulation attack. The protocol's smart contract determined the NGP token's price based on asset reserves in a single Uniswap liquidity pool. This proved to be a fatal flaw.

Blockaid的分析指出了价格甲骨文的操纵攻击。该协议的智能合约根据单个Uniswap流动性库中的资产储备确定了NGP令牌的价格。事实证明这是致命的缺陷。

The Oracle's Weakness

甲骨文的弱点

The attacker exploited this vulnerability using a flash loan. By borrowing a large amount of assets, they temporarily skewed the reserves in the liquidity pool, effectively convincing the protocol that the NGP token was nearly worthless. This allowed the hacker to bypass purchase limits and acquire a massive amount of NGP tokens at rock-bottom prices.

攻击者使用Flash贷款利用了此漏洞。通过借用大量资产，他们暂时偏向流动性库中的储备，有效地说服了该协议，NGP令牌几乎毫无价值。这使黑客可以绕过购买限制，并以岩石最低的价格获得大量的NGP令牌。

The attacker then reversed the initial trade, repaid the flash loan, and walked away with a profit of 443.8 ETH. The funds were subsequently deposited into Tornado Cash to obscure the transaction trail. This incident underscores the risks associated with relying on single-source price oracles and the importance of robust security audits.

然后，攻击者扭转了初始交易，偿还了Flash贷款，并以443.8 ETH的利润走开。这些资金随后被存入龙卷风现金，以掩盖交易步道。该事件强调了与依赖单源价格甲壳相关的风险以及强大的安全审核的重要性。

Red Flags Everywhere

到处都是危险信号

This Gold Protocol incident wasn't entirely surprising. The project operated with minimal transparency and suffered from extremely low trading volume – classic red flags. While unrelated, the strategic shift at Eclipse Labs, including workforce reductions and a change in CEO after their token launch, also highlights the volatile nature of the crypto space and the challenges projects face in achieving sustainable growth and adoption. The Eclipse Labs case underscores the importance of a well-defined strategy and execution in the competitive blockchain landscape.

这个金协议事件并不完全令人惊讶。该项目以最小的透明度运行，并遭受了极低的交易量 - 经典危险信号。尽管无关，但Eclipse Labs的战略转变，包括劳动力降低以及CEO发起后的CEO改变，还突出了加密货币领域的动荡性质以及项目在实现可持续增长和采用方面所面临的挑战。 Eclipse Labs案强调了在竞争性区块链景观中定义明确的战略和执行的重要性。

The Bigger Picture

更大的图片

Rising crypto hacks are becoming increasingly common, fueling the debate over developer liability. Should developers be held accountable for exploits in their unaudited code? The Gold Protocol incident serves as a stark reminder of the need for increased security measures and responsible development practices in the DeFi space.

加密货币的上升变得越来越普遍，这加剧了开发人员责任的辩论。是否应该在未经审计的代码中对开发人员负责漏洞？黄金协议事件迅速提醒人们，需要提高安全措施和在Defi空间中负责任的发展实践。

A Word of Caution

谨慎

Look, DeFi can be a wild ride. But remember, if it sounds too good to be true, it probably is. Do your own research, stick to audited projects, and don't bet the farm on some random token promising the moon. Stay safe out there, folks!

看，defi可能是一个疯狂的旅程。但是请记住，如果听起来太好了，那么可能是真实的。进行自己的研究，坚持审核的项目，不要在一个随机的令牌上押注农场，承诺月球。伙计们，保持安全！