BTC $63,026.22 +0.30%
ETH $1,881.34 +0.20%
BNB $610.24 +0.72%
XRP $1.00 +0.58%
SOL $75.44 +0.41%
TRX $0.3312 -0.39%
DOGE $0.0698 +0.04%
ADA $0.1779 -0.67%
BCH $203.47 -0.06%
LINK $9.57 +6.90%
HYPE $57.03 +2.60%
AAVE $86.63 +1.10%
SUI $0.6793 +0.13%
XLM $0.1576 -0.81%
ZEC $488.25 -0.75%
BTC $63,026.22 +0.30%
ETH $1,881.34 +0.20%
BNB $610.24 +0.72%
XRP $1.00 +0.58%
SOL $75.44 +0.41%
TRX $0.3312 -0.39%
DOGE $0.0698 +0.04%
ADA $0.1779 -0.67%
BCH $203.47 -0.06%
LINK $9.57 +6.90%
HYPE $57.03 +2.60%
AAVE $86.63 +1.10%
SUI $0.6793 +0.13%
XLM $0.1576 -0.81%
ZEC $488.25 -0.75%

USM 遭遇攻击,损失约 70.83 枚 ETH

2026-08-10 10:51:48

ChainCatcher 消息,USM 合约 defund() 赎回函数中的 ethFromDefund() 定价逻辑存在缺陷。该函数在单次赎回计算中,采用当前 FUM 卖出价与预估终期 FUM 卖出价的算术平均值核算对价,但该算法不具备拆分不变性。

叠加单次赎回附带的状态收缩系数 adjShrinkFactor 与整数取整机制后,同等数量的 FUM 资产拆分为 64 次小额赎回操作,最终可提取的以太坊总量将远高于一次性大额赎回所得。

app_icon
ChainCatcher 与创新者共建Web3世界