Polymarket 遭黑客攻击,链下链上交易结果同步机制存在缺陷

ChainCatcher 消息,据 GoPlus 中文社区报道,预测市场平台 Polymarket 因订单系统中链下与链上交易结果同步机制的设计缺陷遭到黑客攻击。

攻击者通过 nonce 操纵,使链上匹配交易在落地前被取消或失效,但链下记录仍有效,导致 API 误报,影响 Negrisk 等交易机器人的交易行为,导致用户损失。攻击过程分析如下:1. 攻击者在 Polymarket off-chain orderbook 上提交/撮合与做市 bot 的大额反向交易。2. 攻击者构造带伪造/重复 nonce 的交易或利用链上 nonce 竞争,使链上交易必然 revert。3. Polymarket API 在链上确认前即返回 “成交成功” 给 bot,导致 bot 认为仓位已对冲,但实际链上状态尚未改变。4. 攻击者随后以真实链上交易吃掉 bot 暴露的方向,从而“无风险”获利。5. 因为 revert 发生在链层,Polymarket 费用不会爆炸,攻击成本可控且能持续执行。GoPlus 建议用户暂停自动化交易工具,验证链上交易状态,加强钱包安全,并密切关注 Polymarket 官方公告。

Disclaimer: The information on this page may come from third parties and does not represent the views or opinions of Gate. The content displayed on this page is for reference only and does not constitute any financial, investment, or legal advice. Gate does not guarantee the accuracy or completeness of the information and shall not be liable for any losses arising from the use of this information. Virtual asset investments carry high risks and are subject to significant price volatility. You may lose all of your invested principal. Please fully understand the relevant risks and make prudent decisions based on your own financial situation and risk tolerance. For details, please refer to Disclaimer.

Gerelateerde artikelen

NYSE Parent Company Finalizes Polymarket Investment, Totaling $1.6 Billion

In brief ICE has invested another $600 million into Polymarket, fulfilling its commitment made in October. Rival Kalshi recently raised $1 billion at a $22 billion valuation, outpacing Polymarket's current valuation. Prediction markets face mounting regulatory pressure, with lawmakers

Decrypt2u geleden

Gavin Newsom Bans California Public Officials From Prediction Market Insider Trading

In brief California public officials are banned via executive order from using inside information to make money on prediction markets. The ban extends to state officials and appointees using information to help others from profiting, as well. The order follows continued scrutiny from

Decrypt3u geleden

杠杆预测交易平台 OmenX 完成数百万美元种子轮融资

OmenX 宣布完成数百万美元种子轮融资,由多家机构参与。该平台将现实事件转化为可交易市场,引入永续合约的杠杆机制,提升资金效率与风险对冲能力。目前已开放测试网,用户可参与积分系统以测试平台功能,准备主网上线。

GateNews6u geleden

Prediction Markets See Explosive Growth as March Transactions Top Millions

Prediction markets are experiencing significant growth, with transaction counts rising over 2,800% and trading volumes reaching $23.9 billion in March. Increased mainstream exposure and interest in political and geopolitical events are driving this trend.

LiveBTCNews6u geleden

疑似内幕地址波段交易"美国3月底前入侵伊朗"预测事件,获利5万美元

Gate News 消息,3 月 30 日,某疑似内幕、低频交易的地址于昨日(3 月 29 日)凌晨开始持续买入"美国 3 月底前入侵伊朗"预测事件,持仓均价为 10¢,共投入 4.2 万美元,而后于今日(3 月 30 日)凌晨 03:51 以 46¢ 抛售,获利 5 万美元。此前该地址曾通过预测美国将在今年打击伊朗获利 15 万美元。

GateNews9u geleden
Opmerking
0/400
Geen opmerkingen