BTC $81,343.71 -0.86%
ETH $2,417.98 -0.83%
BNB $719.77 -1.01%
XRP $1.30 -2.37%
SOL $104.17 -1.12%
TRX $0.3352 +0.33%
DOGE $0.0799 -1.84%
ADA $0.2238 -2.57%
BCH $279.26 +0.35%
LINK $12.27 -1.53%
HYPE $79.55 -2.39%
AAVE $154.63 -3.03%
SUI $1.00 -2.84%
XLM $0.1802 -1.01%
ZEC $1,143.40 -6.76%
AAPL $343.29 +0.32%
AMZN $249.30 -2.12%
GOOGL $339.76 -2.74%
MSFT $528.34 -1.94%
META $708.03 -4.01%
NVDA $214.62 -1.77%
TSLA $351.85 -4.84%
SNDK $1,297.46 -6.34%
INTC $89.80 -6.04%
SPCX $145.47 -3.66%
MU $880.85 -4.92%
AMD $531.34 -5.24%
BTC $81,343.71 -0.86%
ETH $2,417.98 -0.83%
BNB $719.77 -1.01%
XRP $1.30 -2.37%
SOL $104.17 -1.12%
TRX $0.3352 +0.33%
DOGE $0.0799 -1.84%
ADA $0.2238 -2.57%
BCH $279.26 +0.35%
LINK $12.27 -1.53%
HYPE $79.55 -2.39%
AAVE $154.63 -3.03%
SUI $1.00 -2.84%
XLM $0.1802 -1.01%
ZEC $1,143.40 -6.76%
AAPL $343.29 +0.32%
AMZN $249.30 -2.12%
GOOGL $339.76 -2.74%
MSFT $528.34 -1.94%
META $708.03 -4.01%
NVDA $214.62 -1.77%
TSLA $351.85 -4.84%
SNDK $1,297.46 -6.34%
INTC $89.80 -6.04%
SPCX $145.47 -3.66%
MU $880.85 -4.92%
AMD $531.34 -5.24%

cat

All
Article
Flash

first_img NEAR Intents released a post-mortem report, revealing that the $3.8 million vulnerability originated from a deposit notification flaw

The cross-chain exchange protocol NEAR Intents released a post-mortem report attributing a $3.8 million vulnerability to a flaw in the deposit notification feature. The protocol deploys a public settlement contract on NEAR that maintains an internal ledger of deposited tokens, while withdrawals transfer tokens out via a cross-chain bridge. The report was published by NEAR Intents General Manager Alex Shevchenko on October 16, stating that the attacker withdrew $3.8 million before the protocol was shut down on October 1 and returned all funds within 36 hours of detection, with all affected users fully compensated.The report indicates that the feature notifies third-party contracts when tokens are deposited. The attacker created a contract that intentionally caused the notification to fail, allowing the token contract to refund the deposit while NEAR Intents retained the corresponding ledger credit. Through 23 failed deposit transactions, the attacker accumulated $3.8 million in unsupported balance, referred to in the report as ghost funds, and subsequently withdrew real tokens based on this and transferred them to other chains via the Omni infrastructure. Shevchenko stated that this was a vulnerability in the NEAR Intents contract, not in the Omni infrastructure.Withdrawals occurred between September 29 and October 1. The settlement contract was paused and reopened on October 1, with affected routes gradually restored, and contract-side deposits resumed on October 2. The report noted that the vulnerability went undetected because monitoring only compared the original chain assets with the total balance of NEAR side tokens, without comparing the total internal user balances with the actual tokens held by the contract; the team has since added this check and will automatically pause the contract when there is a balance inconsistency. The fix for the October vulnerability was deployed on October 2, but another serious vulnerability report regarding the same feature prompted its complete removal on October 7, with the relevant researcher receiving a $300,000 reward.

Bitcoin.com exclusive interview with Gate founder and CEO Dr. Han: Creating an integrated financial application Gate Money, reshaping the experience of capital flow

Recently, Gate founder and CEO Dr. Han accepted an exclusive interview with the cryptocurrency media Bitcoin.com, reflecting on Gate's journey from developing its underlying trading system in 2013 to becoming a platform serving over 61 million users across more than 130 countries and regions. He further elaborated on the strategic vision of the TOKEN2049 keynote speech "One Gate, Everything Money."Dr. Han stated that in the face of the long-standing barriers between traditional finance and the cryptocurrency market, users have often faced the dilemma of fragmented capital management. They not only need to frequently transfer funds between banks, brokerages, and cryptocurrency platforms but also have to keep a large amount of cash idle in bank accounts, suffering losses from inflation and lack of returns. Meanwhile, high-quality assets like stocks and gold are difficult to consume immediately due to liquidity constraints.To address this industry pain point, Gate officially launched the integrated financial application Gate Money, which consolidates fiat currency, cryptocurrency assets, gold, ETFs, and over 12,800 global stocks into a single account. Users no longer need to hold large amounts of low-yield idle cash and can allocate capital to high-quality assets with value preservation and appreciation potential. When a consumption demand arises, the system will instantly convert the corresponding assets into fiat currency for payment, keeping the funds in an investment state before consumption.
app_icon
ChainCatcher Building the Web3 world with innovations.