Attacker Hacks Arbitrum's Treasure DAO rau Tshaj 100 NFTs los ntawm Leveraging Marketplace Exploit - Bitcoin Xov Xwm

Ib lub lag luam uas tsis yog-fungible token ua rau saum Arbitrum hu ua Treasure DAO raug nyiag thaum Lub Peb Hlis 3 thaum 7:33 teev sawv ntxov (EST), raws li kev tshuaj ntsuam xyuas tom qab sau los ntawm lub tuam txhab kev ruaj ntseg Certik. Lub tuam txhab tsab ntawv ceeb toom sau tseg tias "tshaj li 100 NFTs raug nyiag hauv qhov kev tawm tsam," raws li tus neeg tawm tsam tau siv qhov tsis zoo hauv kev ua lag luam "cov neeg yuav khoom" ua haujlwm.

Post Mortem Analysis los ntawm Certik Qhia Arbitrum NFT Trading Platform Treasure DAO Siv rau ntau dua 100 NFTs

Tus thawj coj Arbitrum NFT kev lag luam Treasure DAO tau tawm tsam rau hnub Thursday tom qab tus neeg tawm tsam nrhiav pom qhov kev siv dag zog uas ua rau poob ntawm "ntau dua 100 NFTs los ntawm cov neeg siv tsis xav txog." Cov post mortem tsom xam ntawm qhov kev tawm tsam raug xa mus rau Bitcoin.com Xov Xwm los ntawm lub tuam txhab blockchain kev ruaj ntseg Certik, lub tuam txhab uas tshuaj xyuas, saib xyuas, thiab tshuaj xyuas cov ntawv cog lus ntse, blockchain thev naus laus zis, thiab kev tswj hwm nyiaj txiag (defi) cov txheej txheem.

"Cov khoom muaj nqis DAO, NFT kev lag luam platform ntawm Arbitrum, tau siv los ntawm tus neeg tsis paub tus neeg tawm tsam uas coj kom zoo dua qhov tsis zoo ntawm lub platform txoj cai," Certik cov ntsiab lus tsom xam. "Kev siv dag zog ua rau poob ntau dua 100 NFTs los ntawm cov neeg siv tsis xav txog. Tom qab qee qhov kev tshuaj xyuas thawj zaug thiab taug qab ntawm tus neeg nyiag lub hnab nyiaj ntawm Twitter, ntau NFTs raug nyiag lawm tau rov qab los. "

Attacker Hacks Arbitrum's Treasure DAO for Over 100 NFTs by Leveraging Marketplace Exploit
"Tus neeg tawm tsam tau siv qhov ua yuam kev hauv kev lag luam Buyer.buyItem muaj nuj nqi, uas tso cai rau lawv teeb tsa _quantity sib npaug rau 0," Certik's post mortem hais. "Nrog rau qhov ntau ntawm 0, totalPrice kuj yog 0, raws li tag nrhoPrice = _pricePerItem * _quantity. Qhov no txhais tau hais tias tus neeg tawm tsam tsis tau them dab tsi rau NFTs lawv 'm yuav.' Raws li tsis muaj qhov yuav tsum tau muaj _quantity> 0, cov haujlwm ua haujlwm ib txwm ua. Cov kab no tuaj yeem daws tau los ntawm kev xav tau ntau dua 0 tus nqi rau _quantity variable. "

Tsis tas li ntawd, Certik qhov kev tshuaj xyuas ntawm Treasure DAO qhov xwm txheej sau tseg tias cov txheej txheem ib txwm muaj token MAGIC poob ntau dua 40% hauv kev poob rau US duas. Treasure DAO co-founder John Patten kuj tweeted hais txog qhov tshwm sim tom qab tus neeg tawm tsam nyiag cov nyiaj. “Kev lag luam khoom muaj nqis raug siv. Thov tshem koj cov khoom. Peb yuav them cov nqi ntawm kev siv-Kuv tus kheej yuav muab tag nrho kuv cov Smols kho qhov no, "Patten hais. Treasure DAO co-founder ntxiv:

Kuv tsis tuaj yeem paub qhov subhuman lub hom phiaj ntawm kev lag luam ncaj ncees rau kev nyiag khoom, tab sis lawv yuav tsis kov yeej lub zej zog.

Certik Hais tias Kev Tshawb Fawb Txog Kev Tshawb Fawb thiab Kev Tshawb Fawb Ua Ntej tuaj yeem cuam tshuam txog Blockchain Protocol Exploits yav tom ntej

Cov kws tshuaj ntsuam xyuas kev ruaj ntseg Certik hais tias tsis muaj leej twg paub leej twg yog tus tom qab siv tab sis hais ntxiv tias ntau tus neeg siv tau "tsuas yog zoo siab tias lawv tau nyiag NFTs rov qab los." Lub tuam txhab cov ntaub ntawv tshaj tawm ntawm qhov xwm txheej xaus los ntawm kev ntxiv tias qhov kev poob tseem ceeb tuaj yeem tshwm sim los ntawm tsuas yog siv ib kab ntawm txoj cai. Lub tuam txhab ua siab dawb ntseeg tias kev saib xyuas ntawm cov saw hlau tshwj xeeb ntawm cov txheej txheem blockchain thiab kev tshuaj xyuas ua ntej xa tuaj yeem pab tiv thaiv qhov tsis zoo yav tom ntej.

"Qhov no hack ib zaug ntxiv qhia txog kev cuam tshuam txog lab-las uas ib kab ntawm txoj cai tuaj yeem muaj," Certik tsab ntawv ceeb toom xaus. "Kev soj ntsuam xyuas ua ntej xa mus ua ke nrog kev tshawb xyuas txuas ntxiv txuas ntxiv yog txoj hauv kev zoo tshaj plaws rau Web3 cov haujlwm los qhia lawv txoj kev cog lus rau kev nyab xeeb thiab ua kom lawv cov neeg siv khoom paub tseeb tias lawv cov nyiaj muaj kev nyab xeeb."

Cim hauv zaj dab neeg no
100 NFTs, Arbitrum, Arbitrum Chain, attacker, Blockchain kev ruaj ntseg, kab laum Treasure DAO, certik, Certik tsom xam, Certik post mortem, Certik Security, Hack, Hacker, John Patten, MAGIC, Magic token, nft, NFT hack, NFT Market, NFT marketplace, NFTs, Treasure DAO, Treasure DAO kab laum, Khoom muaj nqis DAO exploit, Treasure DAO hack, Web3 tej yaam num

Koj xav li cas txog Treasure DAO hack thiab Certik's post mortem report? Qhia rau peb paub koj xav li cas txog cov ncauj lus no hauv cov lus hauv qab no.

Jamie Redman

Jamie Redman yog Tus Thawj Coj Xov Xwm ntawm Bitcoin.com Xov Xwm thiab tus neeg sau xov xwm nyiaj txiag tech nyob hauv Florida. Redman tau ua tus tswv cuab ntawm lub zej zog cryptocurrency txij li xyoo 2011. Nws muaj kev mob siab rau Bitcoin, qhib-qhov chaws, thiab cov ntawv thov kev lag luam. Txij li lub Cuaj Hlis 2015, Redman tau sau ntau dua 5,000 cov ntawv rau Bitcoin.com Xov Xwm hais txog cov kev cuam tshuam cuam tshuam uas tshwm sim niaj hnub no.




Duab Credit: Shutterstock, Pixabay, Wiki Cov Lus Qhia

Disclaimer: Kab lus no tsuas yog rau kev ua ntaub ntawv xwb. Nws tsis yog qhov ncaj qha lossis kev thov rau qhov kev yuav lossis muag, lossis kev pom zoo lossis kev pom zoo ntawm ib yam khoom, kev pabcuam, lossis tuam txhab. Bitcoin.com tsis muab kev nqes peev, se, kev cai lij choj, lossis kev qhia nyiaj txiag. Tsis yog cov tuam txhab lossis cov neeg sau ntawv ua lub luag haujlwm, ncaj qha lossis tsis ncaj rau, rau ib qho kev puas tsuaj lossis poob lossis ua rau raug iab liam los ntawm lossis kev sib txuas nrog kev siv lossis kev cia siab rau qee cov ntsiab lus, khoom muag lossis kev pabcuam tau hais hauv tsab xov xwm no.

Tau qhov twg los: https://news.bitcoin.com/attacker-hacks-arbitrums-treasure-dao-for-over-100-nfts-by-leveraging-marketplace-exploit/