BTC $77,615.74 -2.55%
ETH $2,438.98 -1.88%
BNB $689.83 -2.73%
XRP $1.38 -2.97%
SOL $103.65 -2.88%
TRX $0.3404 +0.51%
DOGE $0.0850 -2.92%
ADA $0.2008 -4.28%
BCH $246.63 -6.75%
LINK $11.35 -3.32%
HYPE $81.67 -1.67%
AAVE $120.87 -4.01%
SUI $0.7387 -2.64%
XLM $0.1779 -3.25%
ZEC $798.12 +1.47%
BTC $77,615.74 -2.55%
ETH $2,438.98 -1.88%
BNB $689.83 -2.73%
XRP $1.38 -2.97%
SOL $103.65 -2.88%
TRX $0.3404 +0.51%
DOGE $0.0850 -2.92%
ADA $0.2008 -4.28%
BCH $246.63 -6.75%
LINK $11.35 -3.32%
HYPE $81.67 -1.67%
AAVE $120.87 -4.01%
SUI $0.7387 -2.64%
XLM $0.1779 -3.25%
ZEC $798.12 +1.47%

USM 遭遇攻击,损失约 70.83 枚 ETH

2026-08-10 10:51:48

ChainCatcher 消息,USM 合约 defund() 赎回函数中的 ethFromDefund() 定价逻辑存在缺陷。该函数在单次赎回计算中,采用当前 FUM 卖出价与预估终期 FUM 卖出价的算术平均值核算对价,但该算法不具备拆分不变性。

叠加单次赎回附带的状态收缩系数 adjShrinkFactor 与整数取整机制后,同等数量的 FUM 资产拆分为 64 次小额赎回操作,最终可提取的以太坊总量将远高于一次性大额赎回所得。

app_icon
ChainCatcher 与创新者共建Web3世界