Fluid 奖励合约被攻破致约 21.5 万美元损失
ChainCatcher 消息，据 BlackHart 称，DeFi 项目 Fluid 在以太坊上的奖励发放机制遭利用，约 21.5 万美元资产被转走。Fluid 采用由一把钥匙发起、另一把钥匙批准的 Merkle 奖励名单机制，攻击者同时掌握两把运营私钥，提交仅向自身发放奖励的名单并批准，随后用空证明完成领取。
被盗资产来自三个奖励分发器，包括 112,883 枚 FLUID、47,903 枚 GHO 和少量 cbBTC，后被兑换为 ETH 并通过 Tornado Cash 转移。Fluid 借贷市场、金库、DEX 及用户存款未受影响，团队在约 10 小时内更换受损密钥并转移剩余奖励资金，但公开说明仅称奖励领取暂停更新，未提及私钥泄露与损失细节。
Disclaimer: OKX Orbit content is provided for informational purposes only. Learn more
Replies
Related Flash News
Fluid: The $19.3 million in bad debts generated by the Resolv incident will be borne by Resolv and the Fluid treasury
Fluid: 100% of the non-performing debt in the short-term loan coverage agreement has been obtained, and user funds will not be affected
Fluid: USR Market has suspended trading and will fully compensate potential users for their losses
Data: Aave became the first DeFi lending protocol in history to exceed 50% market share, with a current TVL of $3,583.3 million
Aave has become the only DeFi lending protocol in history to exceed 50% of the market share, with a current TVL of $3,583.3 million
Fluid has opened buybacks to create on-chain reserves for FLUID tokens, with 100% of Ethereum mainnet revenue going to buybacks in the first month
Fluid DEX trading volume reached a record high of $3.83 billion
Upbit's 24-hour trading volume ranking: XRP, AVNT, and FLUID rank among the top three
Upbit will list FLUID KRW, BTC, and USDT trading pairs
Plasma: 25 million XPL will be distributed to some early users, and $2 billion worth of stablecoins will be put into use on the first day of launch
