BTC $64,982.20 +0.33%
ETH $1,918.66 +0.31%
BNB $602.14 +0.16%
XRP $1.03 -0.59%
SOL $76.56 +0.84%
TRX $0.3298 +0.01%
DOGE $0.0696 -0.53%
ADA $0.1963 -0.99%
BCH $215.75 +0.24%
LINK $8.19 -1.30%
HYPE $54.10 -1.47%
AAVE $91.50 +0.73%
SUI $0.6893 -0.37%
XLM $0.1632 -0.09%
ZEC $507.65 -0.77%
BTC $64,982.20 +0.33%
ETH $1,918.66 +0.31%
BNB $602.14 +0.16%
XRP $1.03 -0.59%
SOL $76.56 +0.84%
TRX $0.3298 +0.01%
DOGE $0.0696 -0.53%
ADA $0.1963 -0.99%
BCH $215.75 +0.24%
LINK $8.19 -1.30%
HYPE $54.10 -1.47%
AAVE $91.50 +0.73%
SUI $0.6893 -0.37%
XLM $0.1632 -0.09%
ZEC $507.65 -0.77%

USM was attacked, resulting in a loss of approximately 70.83 ETH

2026-08-10 10:51:48

The pricing logic in the ethFromDefund() redemption function of the USM contract defund() has flaws. This function calculates the consideration for a single redemption using the arithmetic average of the current FUM selling price and the estimated terminal FUM selling price, but this algorithm lacks split invariance.

After adding the state contraction coefficient adjShrinkFactor associated with a single redemption and the integer rounding mechanism, the total amount of Ethereum that can be extracted from splitting an equal amount of FUM assets into 64 small redemption operations will be significantly higher than that obtained from a one-time large redemption.

app_icon
ChainCatcher Building the Web3 world with innovations.