HypurrFi 披露 Aave V3 早期版本存在舍入误差漏洞,已暂停 XAUT0 与 UBTC 市场新增借贷

AAVE8,37%

Gate News 消息,3 月 6 日,HyperEVM 原生去托管借贷协议 HypurrFi 在 X 平台披露,Aave V3 3.5 之前版本存在"舍入误差"漏洞。在特定条件下,攻击者可通过反复执行供应/提取及借贷/偿还循环操作提取底层代币。受影响市场为 HypurrFi Pooled 中的 XAUT0 与 UBTC。HypurrFi 表示,目前用户资金不存在风险,为确保安全,相关市场已暂停新的供应与借贷操作,提现与还款功能仍可正常使用,其余市场运行正常。HypurrFi 补充称,已通过内部监控系统迅速在链上发现该问题并及时冻结受影响市场,同时正与其他 Aave 部署方及安全研究人员协作处理,并邀请其他 Aave 分叉项目联系以获取更多安全信息。

Disclaimer: The information on this page may come from third parties and does not represent the views or opinions of Gate. The content displayed on this page is for reference only and does not constitute any financial, investment, or legal advice. Gate does not guarantee the accuracy or completeness of the information and shall not be liable for any losses arising from the use of this information. Virtual asset investments carry high risks and are subject to significant price volatility. You may lose all of your invested principal. Please fully understand the relevant risks and make prudent decisions based on your own financial situation and risk tolerance. For details, please refer to Disclaimer.
Commento
0/400
Nessun commento