Pike Finance 一周内遭受两次攻击，损失超过 160 万美元

Pike Finance 在三天内遭受了第二次攻击，凸显了对首次攻击中发现的漏洞的利用。第二次攻击针对的是同一漏洞，导致以太坊、Arbitrum 和 Optimism 链上超过 100 万美元的各种加密货币被盗。

Pike Finance Suffers Second Exploit in Under a Week, Losing Over $1.6 Million

Pike Finance 一周内第二次遭受攻击，损失超过 160 万美元

In a chilling development, Pike Finance, a Circle-backed decentralized finance (DeFi) protocol, has fallen victim to a second exploit within a week, resulting in the theft of over $1.6 million worth of assorted cryptocurrencies. The latest attack, which occurred on May 1st, is alarmingly similar to the initial exploit that struck the protocol on April 26th, indicating a concerning pattern of vulnerabilities.

令人震惊的是，Circle 支持的去中心化金融 (DeFi) 协议 Pike Finance 在一周内成为第二次攻击的受害者，导致价值超过 160 万美元的各类加密货币被盗。 5 月 1 日发生的最新攻击与 4 月 26 日攻击该协议的最初攻击惊人地相似，这表明存在令人担忧的漏洞模式。

The first attack, which took place two days after Pike Finance enabled USDC withdrawals via the CCTP protocol, resulted in the loss of approximately 299,127 USDC. Acknowledging the incident, Pike Finance attributed the breach to a "USDC withdrawal vulnerability", without providing specific details.

第一次攻击发生在 Pike Finance 通过 CCTP 协议启用 USDC 提现两天后，导致约 299,127 USDC 损失。 Pike Finance 承认了这一事件，将此次泄露归因于“USDC 提款漏洞”，但没有提供具体细节。

Barely a week later, on May 1st, Pike Finance issued an urgent alert to the crypto community via Twitter, revealing that the second exploit was "related to the initial USDC vulnerability reported last week on the 26th of April." This startling revelation suggests that the attackers may have identified a loophole in Pike Finance's security measures and exploited it again with devastating consequences.

不到一周后，即 5 月 1 日，Pike Finance 通过 Twitter 向加密社区发出紧急警报，透露第二个漏洞“与上周 4 月 26 日报告的最初的 USDC 漏洞有关”。这一令人震惊的发现表明，攻击者可能已经发现了 Pike Finance 安全措施中的漏洞，并再次利用它，造成了毁灭性的后果。

According to Pike Finance, the latest exploit occurred despite upgrades to the spoke contracts and the inclusion of an additional dependency within the smart contract code. However, these enhancements proved ineffective as a "misalignment in storage mapping" allowed attackers to upgrade the spoke contracts, bypassing admin access and enabling them to withdraw funds.

据 Pike Finance 称，尽管对辐条合约进行了升级并且在智能合约代码中包含了额外的依赖项，但最新的漏洞还是发生了。然而，这些增强功能被证明是无效的，因为“存储映射中的错位”允许攻击者升级分支合约，绕过管理员访问权限并使他们能够提取资金。

The result was a massive loss of over $1.6 million in cryptocurrencies, including 99,970.48 ARB, 64,126 OP, and 479.39 ETH. Pike Finance has since offered a 20% reward for the return of the stolen funds, demonstrating their commitment to recovering the stolen assets.

结果导致加密货币损失超过 160 万美元，其中包括 99,970.48 ARB、64,126 OP 和 479.39 ETH。 Pike Finance 此后为返还被盗资金提供 20% 的奖励，表明他们致力于追回被盗资产的承诺。

This series of exploits has raised serious concerns about the security of Pike Finance's platform and the DeFi ecosystem as a whole. The recurrence of a similar vulnerability suggests that attackers may have gained access to confidential information or exploited weaknesses within the protocol's code.

这一系列漏洞引发了人们对派克金融平台和整个 DeFi 生态系统安全性的严重担忧。类似漏洞的再次出现表明攻击者可能已经获得了机密信息的访问权限或利用了协议代码中的弱点。

Pike Finance has launched an investigation into the incident and is implementing additional security measures to prevent future attacks. However, the repeated breaches highlight the need for heightened vigilance and rigorous security audits to safeguard user funds in the rapidly evolving DeFi landscape.

Pike Finance 已对此事件展开调查，并正在实施额外的安全措施以防止未来发生攻击。然而，屡次发生的违规事件凸显出需要提高警惕并进行严格的安全审计，以在快速发展的 DeFi 领域保护用户资金。

As the crypto industry continues to navigate the complexities of decentralized finance, it is imperative to prioritize security and transparency. Protocols like Pike Finance must invest in robust cyber defenses, conduct thorough vulnerability assessments, and collaborate with security experts to minimize the risk of financial losses and maintain the trust of their users.

随着加密行业继续应对去中心化金融的复杂性，必须优先考虑安全性和透明度。像 Pike Finance 这样的协议必须投资于强大的网络防御，进行彻底的漏洞评估，并与安全专家合作，以最大限度地降低财务损失的风险并维持用户的信任。