The AIZPT Token suffered an exploit on October 5, 2024, resulting in an estimated loss of approximately $20,000 at the time of the exploit.

<p>The <strong>AIZPT Token</strong> suffered an exploit on October 5, 2024, resulting in an estimated loss of approximately $20,000 at the time of the exploit. The root cause of the exploit was the incorrect implementation of price calculation during token purchases.</p><h2>Overview</h2><p>Attacker Contract: <a href="https://bscscan.com/address/0x8408497c18882bfb61be9204cfff530f4ee18320" rel="nofollow">https://bscscan.com/address/0x8408497c18882bfb61be9204cfff530f4ee18320</a></p><p>Vulnerable Contract: <a href="https://bscscan.com/address/0xbe779d420b7d573c08eee226b9958737b6218888" rel="nofollow">https://bscscan.com/address/0xbe779d420b7d573c08eee226b9958737b6218888</a></p><p>Transaction attack: <a href="https://bscscan.com/tx/0x5e694707337cca979d18f9e45f40e81d6ca341ed342f1377f563e779a746460d" rel="nofollow">https://bscscan.com/tx/0x5e694707337cca979d18f9e45f40e81d6ca341ed342f1377f563e779a746460d</a></p><h2>Exploit Analysis</h2><p>The <strong>AIZPT Token</strong> contract allows users to buy and sell tokens directly, with a 50% fee applied when buying tokens and 50% of the tokens burned when selling.</p><p>The problem lies in the formula used for buying tokens. They use the formula of the <strong>quote</strong> function from <strong>Uniswap V2</strong>. While this function is useful for understanding reserve ratios or liquidity, it is not suitable for determining actual trade prices. </p><p>With this formula, users can exploit the system by buying tokens at a low price and selling them at a high price to take profit (even after being charged a 50% fee) using the sell function, which employs the <strong>getAmountOut</strong> formula from <strong>Uniswap V2</strong>.</p><div><figure><a href="https://substackcdn.com/image/fetch/f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2F76f5ed27-9a8b-49d9-b0b3-da0041414c63_1682x1224.png" rel="nofollow"><div><picture><source><img src="https://static.fwimg.io/img/feed/2063808ce4feeb8ac170ede57755b086.jpg" alt=""></source></picture><div><div><div></div><div></div></div></div></div></a></figure></div><p>The attacker flash-loaned 8000 <strong>BNB</strong> and used it to buy <strong>AIZPT</strong> tokens. They then sold the tokens multiple times, earning a profit of 34.88 <strong>BNB</strong>.</p><div><figure><a href="https://substackcdn.com/image/fetch/f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2F8b8e1759-b57b-429a-b46b-95f6041c12d4_2390x1056.png" rel="nofollow"><div><picture><source><img src="https://static.fwimg.io/img/feed/37ba266c1cdb0b449565dd8e2aacfaa6.jpg" alt=""></source></picture><div><div><div></div><div></div></div></div></div></a></figure></div><h2>Lesson learned</h2><p>Developers must thoroughly review and understand the logic of third-party contracts when integrating them with their custom logic to prevent any inconsistencies.</p><p>It is strongly recommended to <strong>conduct a security audit</strong>, whether it is a simple <strong>ERC20</strong> contract with some minor changes or a complex <strong>DeFi</strong> protocol with hundreds of thousands of lines of code.</p>

AIZPT Token Hack Analysis

<AIZPT>代币</AIZPT>在2024年10月5日遭受了一次漏洞攻击,导致当时损失约20,000美元。

<p><strong>AIZPT代币</strong>在2024年10月5日遭受了一次攻击,导致当时约20,000美元的损失。攻击的根源在于在代币购买过程中,价格计算的实现存在问题。</p><h2>概述</h2><p>攻击者合约: <a href="https://bscscan.com/address/0x8408497c18882bfb61be9204cfff530f4ee18320" rel="nofollow">https://bscscan.com/address/0x8408497c18882bfb61be9204cfff530f4ee18320</a></p><p>漏洞合约: <a href="https://bscscan.com/address/0xbe779d420b7d573c08eee226b9958737b6218888" rel="nofollow">https://bscscan.com/address/0xbe779d420b7d573c08eee226b9958737b6218888</a></p><p>攻击交易: <a href="https://bscscan.com/tx/0x5e694707337cca979d18f9e45f40e81d6ca341ed342f1377f563e779a746460d" rel="nofollow">https://bscscan.com/tx/0x5e694707337cca979d18f9e45f40e81d6ca341ed342f1377f563e779a746460d</a></p><h2>攻击分析</h2><p><strong>AIZPT代币</strong>合约允许用户直接买卖代币,买入时收取50%的费用,卖出时销毁50%的代币。</p><p>问题出在买入代币时使用的公式。他们使用了<strong>Uniswap V2</strong>的<strong>quote</strong>函数公式。这个函数适用于理解储备比率或流动性,但不适合确定实际交易价格。</p><p>使用这个公式,用户可以通过以低价买入代币,然后使用<strong>Uniswap V2</strong>的<strong>getAmountOut</strong>公式以高价卖出代币来获利(即使要支付50%的费用)。</p><div><figure><a href="https://substackcdn.com/image/fetch/f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2F76f5ed27-9a8b-49d9-b0b3-da0041414c63_1682x1224.png" rel="nofollow"><div><picture><source><img src="https://static.fwimg.io/img/feed/2063808ce4feeb8ac170ede57755b086.jpg" alt=""></source></picture><div><div><div></div><div></div></div></div></div></a></figure></div><p>攻击者闪电贷了8000 <strong>BNB</strong>,用它来购买<strong>AIZPT</strong>代币。然后多次卖出这些代币,获得了34.88 <strong>BNB</strong>的利润。</p><div><figure><a href="https://substackcdn.com/image/fetch/f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2F8b8e1759-b57b-429a-b46b-95f6041c12d4_2390x1056.png" rel="nofollow"><div><picture><source><img src="https://static.fwimg.io/img/feed/37ba266c1cdb0b449565dd8e2aacfaa6.jpg" alt=""></source></picture><div><div><div></div><div></div></div></div></div></a></figure></div><h2>经验教训</h2><p>开发人员在将第三方合约集成到自定义逻辑中时,必须彻底审查和理解其逻辑,以防止任何不一致。</p><p>强烈建议进行<strong>安全审计</strong>,无论是简单的<strong>ERC20</strong>合约还是复杂的<strong>DeFi</strong>协议,都应该进行审计。</p>

AIZPT 代币黑客分析

4月29日，著名日本艺人Yua Mikami在<X>平台上宣布，她将在Solana网络上发行一个名为MIKAMI的新meme币，将于...

Yua Mikami 即将在Solana上发布 memecoin MIKAMI

在2025年4月30日，B2网络（B2）将通过币安钱包在BNB智能链上开展代币生成事件（TGE），并与PancakeSwap合作。这一事件为投资者提供了机会...

币安安钱包为 B2 Network（B2）举办 TGE 销售

原文标题：Crypto AI Agents That Win: The 4 Key Pillars Of Success
原文作者：Graeme
编译：Asher
在加密领域，大多数AI Agent项目之所以迅速失去动能，根本原因在于忽视了系统性建设。一旦某个关键环节出现偏差，势能就会流失，被那些在产品、代币、社交代理人与叙事上全面发力的竞争者赶超。真正的竞争优势，不仅是单点突破，而是构建一个由A...