BSC 链 MT 代币买入限制机制存在缺陷,黑客套利约 24.2 万美元

Gate News 消息,3 月 10 日,据 BlockSec 监测,其系统在 BSC 检测到一笔针对 MT-WBNB 资金池的可疑交易,预估损失约 24.2 万美元。漏洞原因在于买方限制机制存在缺陷:在通缩模式下,正常买入操作会回退,而路由器/交易对则被列入白名单,这使得攻击者可以通过路由器互换和流动性移除绕过限制,从该交易对获取 MT。攻击者随后出售 MT 以积累 pendingBurnAmount,并调用 distributeFees() 直接从交易对中销毁 MT,人为拉高价格,然后再将 MT 兑换回 WBNB 以获利。此外,一条允许前 0.2 MT 转账绕过买家限制的推荐规则,使得攻击者能够启动攻击。

Disclaimer: The information on this page may come from third parties and does not represent the views or opinions of Gate. The content displayed on this page is for reference only and does not constitute any financial, investment, or legal advice. Gate does not guarantee the accuracy or completeness of the information and shall not be liable for any losses arising from the use of this information. Virtual asset investments carry high risks and are subject to significant price volatility. You may lose all of your invested principal. Please fully understand the relevant risks and make prudent decisions based on your own financial situation and risk tolerance. For details, please refer to Disclaimer.
Commento
0/400
Nessun commento