BTC $77,543.27 -1.46%
ETH $2,412.44 -2.46%
BNB $687.52 -0.85%
XRP $1.35 -2.65%
SOL $100.16 -3.36%
TRX $0.3216 -3.18%
DOGE $0.0814 -2.12%
ADA $0.1976 -1.68%
BCH $248.79 +0.44%
LINK $11.20 -2.02%
HYPE $82.93 -1.56%
AAVE $129.19 +3.03%
SUI $0.7224 -1.54%
XLM $0.1755 -1.30%
ZEC $839.52 -2.03%
BTC $77,543.27 -1.46%
ETH $2,412.44 -2.46%
BNB $687.52 -0.85%
XRP $1.35 -2.65%
SOL $100.16 -3.36%
TRX $0.3216 -3.18%
DOGE $0.0814 -2.12%
ADA $0.1976 -1.68%
BCH $248.79 +0.44%
LINK $11.20 -2.02%
HYPE $82.93 -1.56%
AAVE $129.19 +3.03%
SUI $0.7224 -1.54%
XLM $0.1755 -1.30%
ZEC $839.52 -2.03%

SlowMist:GebProxyActions 合約訪問控制漏洞致 5.9436 枚 ETH 被盜

2026-09-02 11:12:52

ChainCatcher 消息,据 SlowMist 監測,GebProxyActions 合約因缺乏調用者訪問控制,導致約 5.9436 枚 ETH 損失。受害用戶此前直接調用 GebProxyActions.quitSystem 而非通過 DSProxy 委託調用,導致 ownsSAFE[safe] 被設置為 GebProxyActions 合約。

攻擊者直接調用 GebProxyActions.quitSystem(manager, safe, dst),繞過了 GebSafeManager 的 safeAllowed 檢查,將抵押品轉移至自身。

app_icon
ChainCatcher 與創新者共建Web3世界