Fluid 奖励合约被攻破致约 21.5 万美元损失
ChainCatcher 消息，据 BlackHart 称，DeFi 项目 Fluid 在以太坊上的奖励发放机制遭利用，约 21.5 万美元资产被转走。Fluid 采用由一把钥匙发起、另一把钥匙批准的 Merkle 奖励名单机制，攻击者同时掌握两把运营私钥，提交仅向自身发放奖励的名单并批准，随后用空证明完成领取。
被盗资产来自三个奖励分发器，包括 112,883 枚 FLUID、47,903 枚 GHO 和少量 cbBTC，后被兑换为 ETH 并通过 Tornado Cash 转移。Fluid 借贷市场、金库、DEX 及用户存款未受影响，团队在约 10 小时内更换受损密钥并转移剩余奖励资金，但公开说明仅称奖励领取暂停更新，未提及私钥泄露与损失细节。
Disclaimer: OKX Orbit content is provided for informational purposes only. Learn more
Replies
Related Flash News
Fluid: The $19.3 million in bad debts generated by the Resolv incident will be borne by Resolv and the Fluid treasury
Fluid: 100% of the non-performing debt in the short-term loan coverage agreement has been obtained, and user funds will not be affected
Fluid: USR Market has suspended trading and will fully compensate potential users for their losses
Fluid DAO proposes to establish a foundation with an annual allocation of $3 million to support operations
Data: Aave became the first DeFi lending protocol in history to exceed 50% market share, with a current TVL of $3,583.3 million
Aave has become the only DeFi lending protocol in history to exceed 50% of the market share, with a current TVL of $3,583.3 million
Coinbase will launch Fluid (FLUID) and World Mobile Token (WMTX) spot trading
Coinbase will launch spot trading of Fluid (FLUID) and World Mobile Token (WMTX).
Coinbase will list FLUID and WMTX
Analysis: FLUID may rise in a short period of time or because of the purchase and repayment of the loan, and only use the 40% discount to repay the loan to make the market
