BTC $64,962.07 +0.34%
ETH $1,917.80 +0.26%
BNB $602.58 +0.42%
XRP $1.03 -0.65%
SOL $76.59 +0.86%
TRX $0.3297 +0.01%
DOGE $0.0696 -0.41%
ADA $0.1960 -1.27%
BCH $215.83 +0.36%
LINK $8.18 -1.20%
HYPE $54.17 -1.01%
AAVE $91.49 +0.97%
SUI $0.6898 +0.08%
XLM $0.1624 -0.54%
ZEC $508.28 -0.49%
BTC $64,962.07 +0.34%
ETH $1,917.80 +0.26%
BNB $602.58 +0.42%
XRP $1.03 -0.65%
SOL $76.59 +0.86%
TRX $0.3297 +0.01%
DOGE $0.0696 -0.41%
ADA $0.1960 -1.27%
BCH $215.83 +0.36%
LINK $8.18 -1.20%
HYPE $54.17 -1.01%
AAVE $91.49 +0.97%
SUI $0.6898 +0.08%
XLM $0.1624 -0.54%
ZEC $508.28 -0.49%

USM 遭遇攻击,损失约 70.83 枚 ETH

2026-08-10 10:51:48

ChainCatcher 消息,USM 合约 defund() 赎回函数中的 ethFromDefund() 定价逻辑存在缺陷。该函数在单次赎回计算中,采用当前 FUM 卖出价与预估终期 FUM 卖出价的算术平均值核算对价,但该算法不具备拆分不变性。

叠加单次赎回附带的状态收缩系数 adjShrinkFactor 与整数取整机制后,同等数量的 FUM 资产拆分为 64 次小额赎回操作,最终可提取的以太坊总量将远高于一次性大额赎回所得。

app_icon
ChainCatcher 与创新者共建Web3世界