BTC $77,673.60 -3.86%
ETH $2,441.14 -3.25%
BNB $690.64 -3.35%
XRP $1.38 -5.25%
SOL $103.90 -4.68%
TRX $0.3410 +0.64%
DOGE $0.0850 -4.74%
ADA $0.2025 -5.89%
BCH $245.95 -8.87%
LINK $11.41 -4.93%
HYPE $80.15 -4.78%
AAVE $121.59 -5.66%
SUI $0.7405 -5.51%
XLM $0.1786 -4.75%
ZEC $799.41 -1.92%
BTC $77,673.60 -3.86%
ETH $2,441.14 -3.25%
BNB $690.64 -3.35%
XRP $1.38 -5.25%
SOL $103.90 -4.68%
TRX $0.3410 +0.64%
DOGE $0.0850 -4.74%
ADA $0.2025 -5.89%
BCH $245.95 -8.87%
LINK $11.41 -4.93%
HYPE $80.15 -4.78%
AAVE $121.59 -5.66%
SUI $0.7405 -5.51%
XLM $0.1786 -4.75%
ZEC $799.41 -1.92%

GoPlus:402bridge 疑似被盗,超 200 位用户因授权过量导致被盗 USDC

2025-10-28 11:46:59

ChainCatcher 消息,GoPlus 中文社区发出安全警报,x402 跨链协议 @402bridge 疑似被盗,0xed1A 开头合约的 Creator 把 Owner 转给了 0x2b8F 地址,然后新 Owner 调用合约中 transferUserToken 方法转移所有已授权用户钱包剩余的 USDC。

Mint 前要先授权 USDC 给 @402bridge 合约,导致二百多用户因授权过多数量导致剩余 USDC 被转走,0x2b8F 地址共转移用户 17,693 枚 USDC,随后将 USDC 换成 ETH 后经过多次跨链交易跨到了 Arbitrum。建议参与过该项目的用户,请尽快取消相关授权;提醒用户在授权前检查授权地址是否为交互项目官方地址,仅授权所需数量,切勿无限授权;并注意定期检查授权,取消无用授权。

app_icon
ChainCatcher 与创新者共建Web3世界