Yield Protocol 失效合约被利用，导致 18.1 万美元加密货币损失

当黑客利用其失效的智能合约窃取 Arbitrum 区块链上价值约 181,000 美元的加密资产时，Yield Protocol 遭受了重大挫折。此次攻击针对的是封闭式 DeFi 借贷平台中长期存在的漏洞，凸显了 DeFi 生态系统中持续存在的风险。

Yield Protocol's Defunct Contracts Exploited, Resulting in $181,000 Crypto Loss

Yield Protocol 失效合约被利用，导致 181,000 美元的加密货币损失

Arlington, VA (April 30, 2024) - Yield Protocol, a once-prominent decentralized finance (DeFi) lending platform that halted operations in late 2023, has fallen victim to a devastating exploit that has cost investors approximately $181,000 worth of crypto assets.

弗吉尼亚州阿灵顿（2024 年 4 月 30 日） - Yield Protocol 是一个曾经著名的去中心化金融 (DeFi) 借贷平台，于 2023 年底停止运营，现已成为毁灭性漏洞的受害者，导致投资者损失了价值约 181,000 美元的加密资产。

The exploit, which was discovered by Certik Alert and corroborated by blockchain sleuths PeckShield, took advantage of lingering vulnerabilities in Yield Protocol's defunct smart contracts. Despite repeated warnings for investors to close their positions and withdraw their funds, an unidentified attacker capitalized on the protocol's compromised state.

该漏洞由 Certik Alert 发现，并得到区块链侦探 PeckShield 的证实，它利用了 Yield Protocol 已失效的智能合约中长期存在的漏洞。尽管一再警告投资者平仓并撤回资金，但身份不明的攻击者还是利用了该协议的受损状态。

Certik's investigation revealed that the attacker manipulated the balance and total supply of pool tokens through flash-loaned assets, allowing them to siphon off extra pool tokens. This exploit highlights the persistent risks that can lurk within DeFi ecosystems, especially when protocols cease operations and lose official support.

Certik 的调查显示，攻击者通过闪贷资产操纵了矿池代币的余额和总供应量，从而使他们能够吸走额外的矿池代币。这一漏洞凸显了 DeFi 生态系统中可能潜伏的持续风险，尤其是当协议停止运营并失去官方支持时。

Compounding the losses incurred by Yield Protocol's remaining stakeholders, the protocol's efforts to recover the stolen funds have been rendered futile due to the lack of ongoing support since February 2. This latest breach echoes a similar incident in March 2023, when Yield Protocol was one of several DeFi platforms affected by an attack on Euler Finance. However, in that instance, Yield Protocol managed to recover and restore its functionality.

由于自 2 月 2 日以来缺乏持续支持，Yield Protocol 的剩余利益相关者所遭受的损失更加严重。该协议追回被盗资金的努力已变得徒劳。这一最新的违规事件与 2023 年 3 月发生的类似事件相呼应，当时 Yield Protocol 是其中之一。多个 DeFi 平台受到 Euler Finance 攻击的影响。然而，在这种情况下，Yield Protocol 设法恢复并恢复其功能。

Meanwhile, a report from blockchain security firm Immunefi suggests a modest decline in hacking and fraud incidents in the first quarter of 2024 compared to the previous year. Immunefi's data indicates a 23% decrease in losses, with Q1 of 2024 witnessing approximately $336.3 million lost to cybercriminal activities, down from $437.5 million in the corresponding quarter of 2023. The report also identified 46 hacking incidents and 15 fraudulent activities during the period.

与此同时，区块链安全公司 Immunefi 的一份报告显示，与上一年相比，2024 年第一季度的黑客和欺诈事件略有下降。 Immunefi 的数据显示，损失减少了 23%，2024 年第一季度网络犯罪活动造成的损失约为 3.363 亿美元，低于 2023 年同期的 4.375 亿美元。报告还发现，在此期间发生了 46 起黑客事件和 15 起欺诈活动。

Despite the decline in overall losses, the cross-chain bridge protocol Orbit Bridge suffered the most significant single loss of $81.7 million, highlighting the diverse vulnerabilities that exist across different crypto projects.

尽管整体损失有所下降，但跨链桥协议 Orbit Bridge 遭受了最重大的单笔损失，达 8170 万美元，凸显了不同加密项目中存在的各种漏洞。

As DeFi continues to evolve, it is imperative for investors to remain vigilant and take appropriate measures to protect their assets. Thorough research, due diligence, and a clear understanding of the risks involved are essential for navigating the ever-changing landscape of decentralized finance.

随着 DeFi 的不断发展，投资者必须保持警惕并采取适当措施保护自己的资产。彻底的研究、尽职调查以及对所涉及风险的清晰了解对于驾驭不断变化的去中心化金融格局至关重要。