BTC $79,485.64 -0.63%
ETH $2,493.87 -0.30%
BNB $745.15 -1.73%
XRP $1.40 -1.37%
SOL $105.11 -1.89%
TRX $0.3365 +0.70%
DOGE $0.0897 -1.34%
ADA $0.2190 -0.30%
BCH $256.82 -1.55%
LINK $13.43 +9.09%
HYPE $87.41 -0.02%
AAVE $134.33 -0.23%
SUI $0.8122 +1.56%
XLM $0.1910 +2.51%
ZEC $1,189.40 -0.72%
BTC $79,485.64 -0.63%
ETH $2,493.87 -0.30%
BNB $745.15 -1.73%
XRP $1.40 -1.37%
SOL $105.11 -1.89%
TRX $0.3365 +0.70%
DOGE $0.0897 -1.34%
ADA $0.2190 -0.30%
BCH $256.82 -1.55%
LINK $13.43 +9.09%
HYPE $87.41 -0.02%
AAVE $134.33 -0.23%
SUI $0.8122 +1.56%
XLM $0.1910 +2.51%
ZEC $1,189.40 -0.72%

USM 遭遇攻击,损失约 70.83 枚 ETH

2026-08-10 10:51:48

ChainCatcher 消息,USM 合约 defund() 赎回函数中的 ethFromDefund() 定价逻辑存在缺陷。该函数在单次赎回计算中,采用当前 FUM 卖出价与预估终期 FUM 卖出价的算术平均值核算对价,但该算法不具备拆分不变性。

叠加单次赎回附带的状态收缩系数 adjShrinkFactor 与整数取整机制后,同等数量的 FUM 资产拆分为 64 次小额赎回操作,最终可提取的以太坊总量将远高于一次性大额赎回所得。

app_icon
ChainCatcher 与创新者共建Web3世界