The @SolvProtocol BitcoinReserveOffering contract was reportedly exploited, resulting in a loss of ~$2.7M. The root cause is a reentrancy issue caused by an unintended interaction between mint() and the ERC721 receiver callback.
When redeeming the entire value of an ERC-3525 SFT, the contract transferred the SFT via safeTransferFrom (doSafeTransferIn), triggering onERC721Received. The callback immediately minted BRO based on the SFT value. After returning, mint() resumed and minted BRO again for the same value, effectively double-counting the asset.
By repeatedly cycling burn → mint, the attacker amplified their BRO balance, inflating a small initial amount into a large supply and ultimately exchanging it for SolvBTC to realize the profit.
Attack TX:
https://app.blocksec.com/phalcon/explorer/tx/eth/0x44e637c7d85190d376a52d89ca75f2d208089bb02b7c4708ad2aaae3a97a958d…

Incident Update: BRO Vault
A limited exploit occurred in one of our BRO vaults, affecting a very small number of users (<10).
The impacted amount is 38.0474 SolvBTC.
All other vaults and user funds remain secure and unaffected. We're actively investigating with top security

Solv Protocol

Twitter

据报道，@SolvProtocol BitcoinReserveOffering 合约遭到攻击，造成约 270 万美元的损失。根本原因是 mint() 函数与 ERC721 接收器回调函数之间意外交互导致的重入漏洞。

当赎回 ERC-3525 SFT 的全部价值时，合约通过 safeTransferFrom (doSafeTransferIn) 函数转移 SFT，触发了 onERC721Received 回调函数。回调函数立即根据 SFT 的价值铸造了 BRO。回调函数返回后，mint() 函数恢复运行，再次铸造了相同价值的 BRO，导致资产被重复计算。

攻击者通过反复执行销毁 → 铸造操作，不断增加其 BRO 余额，将初始的小额 BRO 膨胀成大量的 BRO，最终将其兑换成 SolvBTC 以获利。

攻击交易：

https://app.blocksec.com/phalcon/explorer/tx/eth/0x44e637c7d85190d376a52d89ca75f2d208089bb02b7c4708ad2aaae3a97a958d…

Block 旗下的比特币项目比特币 at Block（Block 由 Twitter联创杰克·多西创立）刚刚宣布上线免费比特币水龙头，标记比特币分发模式的回归……

杰克·多西宣布了一项价值 100 万镁的项目，旨在免费赠送比特币。

微策略（Strategy）创办人 Michael Saylor 断言比特币已赢得全球叙事战，同时点名 BIP- […]
〈Michael Saylor 警告 BIP-110 是比特币最大威胁；四年周期已死、机构资本才是真主角〉这篇文章最早发布于动区BlockTempo《动区动趋-最具影响力的区块链新闻媒体》。

Michael Saylor 警告 BIP-110 是比特币最大威胁；四年周期已死、机构资本才是真主角

根据链上数据显示， Chainlink已按计划按季度解锁 1787.5 万枚 LINK 代币，价值约 1.65 亿美元。
在新增的供应量中，有 1487.5 万枚 LINK，……