ParaSwap 客户因合约漏洞造成资金损失，损失惨重

ParaSwap 的 AugustusV6 合约漏洞允许黑客于 3 月 18 日窃取批准用户的资金。作为回应，ParaSwap DAO 投票决定从其金库中赔偿受害者，获得了 96.81% 的支持。尽管迅速采取行动追回资产，但还是损失了 864,000 美元。 ParaSwap 与 TRM Labs 和 Chainaanalysis 合作追踪被盗资金，最终于 4 月 4 日追回 500,000 美元。

ParaSwap Customers Reimbursed for Losses After Contract Vulnerability Exploitation

ParaSwap 客户已获得合约漏洞利用造成的损失赔偿

A critical vulnerability in the recently released ParaSwap AugustusV6 contract resulted in unauthorized access to customer funds, prompting the decentralized finance (DeFi) aggregator to pledge reimbursement from its treasury.

最近发布的 ParaSwap AugustusV6 合约中的一个严重漏洞导致未经授权访问客户资金，促使去中心化金融 (DeFi) 聚合商承诺从其财务部门进行补偿。

The Contract Vulnerability and Hack

合约漏洞和黑客攻击

On March 18, ParaSwap deployed its AugustusV6 contract, designed to enhance swap efficiency and reduce gas fees. However, a significant flaw within the contract enabled hackers to exploit user approvals, siphoning funds from their accounts.

3 月 18 日，ParaSwap 部署了 AugustusV6 合约，旨在提高交换效率并降低 Gas 费用。然而，合同中的一个重大缺陷使黑客能够利用用户的批准，从他们的账户中窃取资金。

Swift Action and Recovery

迅速行动和恢复

Swift action by the ParaSwap team, in partnership with blockchain analytics firms TRM Labs and Chainalysis, led to a rapid rewind of the contract, salvaging approximately $3.4 million in assets. This process, however, incurred costs of around $864,000.

ParaSwap 团队与区块链分析公司 TRM Labs 和 Chainaanalysis 合作迅速采取行动，导致合同迅速撤销，挽救了约 340 万美元的资产。然而，这一过程产生了约 864,000 美元的成本。

Treasury-Funded Reimbursements

财政部资助的报销

On April 4, the ParaSwap decentralized autonomous organization (DAO) proposed a reimbursement plan for affected customers, leveraging the project's treasury funds. Over 96% of users approved the proposal after a three-day voting period.

4 月 4 日，ParaSwap 去中心化自治组织 (DAO) 利用该项目的国库资金，为受影响的客户提出了一项补偿计划。经过三天的投票期，超过 96% 的用户批准了该提案。

Transparency and Recovery

透明度和恢复

ParaSwap CEO Mounir Benchemled praised the community's support and transparency throughout the incident. The company disclosed the recovery of approximately $500,000 worth of stolen assets on April 4, significantly reducing the outstanding balance.

ParaSwap 首席执行官 Mounir Benchemled 赞扬了社区在整个事件中的支持和透明度。该公司于 4 月 4 日披露，已追回价值约 50 万美元的被盗资产，显着减少了未清余额。

Long-Term Resilience

长期弹性

ParaSwap emphasized the importance of customer reimbursement in ensuring the long-term viability of the project. The incident highlighted the inherent risks associated with DeFi protocols and the need for robust security measures.

ParaSwap 强调了客户报销对于确保项目长期生存的重要性。该事件凸显了与 DeFi 协议相关的固有风险以及强有力的安全措施的必要性。

Industry-Wide Impact

全行业的影响

The ParaSwap security breach underscores the ongoing challenges faced by the DeFi sector. Despite industry advancements in blockchain security, vulnerabilities remain a persistent threat.

ParaSwap 安全漏洞凸显了 DeFi 领域持续面临的挑战。尽管区块链安全领域取得了行业进步，但漏洞仍然是一个持续的威胁。

March Hack Recovered

三月黑客事件已恢复

According to blockchain security startup PeckShield, approximately $100 million worth of digital assets stolen in the March hack have been recovered. Notably, 52.8% of the stolen funds, primarily originating from a security breach affecting the Munchables NFT game, have been retrieved.

据区块链安全初创公司 PeckShield 称，在 3 月份的黑客攻击中被盗的价值约 1 亿美元的数字资产已被追回。值得注意的是，52.8% 的被盗资金（主要源自影响 Munchables NFT 游戏的安全漏洞）已被追回。

Conclusion

结论

The ParaSwap contract vulnerability and subsequent customer reimbursements serve as a reminder of the ongoing evolution of DeFi security and the importance of swift and transparent responses to security breaches. The industry continues to grapple with the challenges of mitigating risk while fostering innovation and accessibility.

ParaSwap 合约漏洞和随后的客户赔偿提醒人们，DeFi 安全性正在不断发展，以及对安全漏洞做出快速、透明反应的重要性。该行业继续应对降低风险的挑战，同时促进创新和可及性。