In this week’s digest, the DeFi market experienced a substantial loss of more than $3,000,000 through a series of attacks such as private key compromises, access control breaches, and price manipulations. Among these incidents, the Zunami Protocol incurred the most significant impact, suffering a loss of $2,000,000.

<p>In this week’s digest, the DeFi market experienced a substantial loss of more than $3,000,000 through a series of attacks such as private key compromises, access control breaches, and price manipulations. Among these incidents, the Zunami Protocol incurred the most significant impact, suffering a loss of $2,000,000.</p><div><figure><a href="https://substackcdn.com/image/fetch/f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2Fc1d2976d-9dea-468a-bec3-a1a1b82163d2_1890x1361.png" rel="nofollow"><div><picture><source><img src="https://static.fwimg.io/img/feed/360496890bc80d70761c58acc3f96468.jpg" alt=""></source></picture><div></div></div></a></figure></div><div><hr></div><h2>Last Week’s Incidents</h2><p>🚨<strong>Project:</strong> Zunami Protocol <br>⛓️<strong>Chain:</strong> Ethereum <br>💥<strong>Type:</strong> Price Manipulation <br>💸<strong>Loss amount:</strong> ~$2,000,000</p><p>In the largest hack last week, Zunami Protocol suffered a substantial loss of more than $2,000,000 due to a price manipulation attack. The attack involves an inaccurate calculation of LP price, which is influenced by factors such as the quantity of "sdt" tokens held in the "MIMCurveStakeDao" liquidity pool. The attacker strategically donates a significant amount of "sdt" tokens to artificially inflate the LP price, aiming to exploit this manipulation.</p><div><figure><a href="https://substackcdn.com/image/fetch/f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2F01b6bcab-fa05-4b09-8a8d-dfdbb05ef191_1278x346.png" rel="nofollow"><div><picture><source><img src="https://static.fwimg.io/img/feed/6ea68f7c36961fbc168894f47a837861.jpg" alt=""></source></picture><div></div></div></a></figure></div><div><figure><a href="https://substackcdn.com/image/fetch/f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2F8bb14dde-01c3-43f4-ad6f-af704493eaaa_1004x470.png" rel="nofollow"><div><picture><source><img src="https://static.fwimg.io/img/feed/91d161f70abf039ac7b05e7b934f7905.jpg" alt=""></source></picture><div></div></div></a></figure></div><div><figure><a href="https://substackcdn.com/image/fetch/f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2F292f6606-a90f-47f1-9204-6d305c9e93c3_1604x992.png" rel="nofollow"><div><picture><source><img src="https://static.fwimg.io/img/feed/42b3ccc5c2f6ee57f38427b27740e723.jpg" alt=""></source></picture><div></div></div></a></figure></div><p>In response to the breach, the project has made a commitment to rectify and enhance the omnipool and zStable systems. Additionally, they have pledged to restore all zStables collateral to holders.</p><div><hr></div><p>🚨<strong>Project:</strong> BeLaunch <br>⛓️<strong>Chain:</strong> SUI <br>💥<strong>Type:</strong> Access Control <br>💸<strong>Loss amount:</strong> ~$300,000</p><p>Last week, BeLaunch was attacked for roughly $35,000 due to a vulnerability in their smart contract. The contract included a publicly shared <strong>TreasuryCap</strong> object during its initialization. This object seemingly allowed anyone to interact with the contract and mint tokens. As a result, the attacker was able to exploit this object and authorize the transfer of 500,000 BLAT tokens to five different wallet addresses.</p><div><figure><a href="https://substackcdn.com/image/fetch/f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2F25f61579-970b-4c67-b84a-370e75cd1fc4_1998x864.png" rel="nofollow"><div><picture><source><img src="https://static.fwimg.io/img/feed/55db5062141e94f12a40962ff06e9227.jpg" alt=""></source></picture><div></div></div></a></figure></div><div><hr></div><p>🚨<strong>Project:</strong> RocketSwap <br>⛓️<strong>Chain:</strong> Base <br>💥<strong>Type:</strong> Compromised Private Key <br>💸<strong>Loss amount:</strong> ~$869,000</p><p>RocketSwap was exploited for roughly $869,000. This breach was a result of a brute force attack that exposed the deployer’s private key. The attacker took advantage of this vulnerability and authorized the transfer of 427 ETH from the farm contracts into their own account.</p><p>At the time of writing, the project had acknowledged the attack and had since initiated a compensation program for affected users.</p><div><figure><a href="https://substackcdn.com/image/fetch/f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2Fa299038d-b501-4c2c-9102-3c06c59410e1_593x321.png" rel="nofollow"><div><picture><source><img src="https://static.fwimg.io/img/1px.png" alt=""></source></picture><div></div></div></a></figure></div><div><hr></div>

Verichains Weekly Security Digest | August 2023 Week 4

在本周的摘要中，由于私钥泄露、访问控制违规和价格操纵等一系列攻击，DeFi 市场经历了超过 300 万美元的巨额损失。其中，Zunami协议受到的影响最为严重，损失达200万美元。

<p>在本周的摘要中，由于私钥泄露、访问控制违规和价格操纵等一系列攻击，DeFi 市场经历了超过 300 万美元的巨额损失。其中，Zunami协议受到的影响最为严重，损失达200万美元。 </p><div><figure><div><picture><source><img src="https://static.fwimg.io/img/feed/360496890bc80d70761c58acc3f96468.jpg" alt=""></source></picture><div></div></div></figure></div><div><hr></div><h2>上周的事件</h2><p>🚨<strong>项目：</strong> Zunami 协议<br>⛓️<strong>链：</strong>以太坊<br>💥<strong>类型：</strong>价格操纵<br>💸<strong>损失金额：</strong> ~$2,000,000</p><p>在上周最大的黑客攻击中，Zunami Protocol 由于价格操纵攻击而遭受了超过 2,000,000 美元的巨额损失。此次攻击涉及 LP 价格计算不准确，该价格受到“MIMCurveStakeDao”流动性池中持有的“sdt”代币数量等因素的影响。攻击者战略性地捐赠大量“sdt”代币，人为抬高 LP 价格，旨在利用这种操纵行为。 </p><div><figure><div><picture><source><img src="https://static.fwimg.io/img/feed/6ea68f7c36961fbc168894f47a837861.jpg" alt=""></source></picture><div></div></div></figure></div><div><figure><div><picture><source><img src="https://static.fwimg.io/img/feed/91d161f70abf039ac7b05e7b934f7905.jpg" alt=""></source></picture><div></div></div></figure></div><div><figure><div><picture><source><img src="https://static.fwimg.io/img/feed/42b3ccc5c2f6ee57f38427b27740e723.jpg" alt=""></source></picture><div></div></div></figure></div><p>针对此次违规行为，该项目承诺纠正和增强omnipool和zStable系统。此外，他们还承诺将所有 zStables 抵押品归还给持有人。</p><div><hr></div><p> 🚨<strong>项目：</strong> BeLaunch<br> ⛓️<strong>链：</strong> Sui<br> 💥<strong>类型：</strong>访问控制<br>💸<strong>损失金额：</strong> ~$300,000</p><p>上周，BeLaunch 由于智能合约中的漏洞而遭受了约 35,000 美元的攻击。该合约在初始化期间包含一个公开共享的<strong>TreasuryCap</strong>对象。这个对象似乎允许任何人与合约交互并铸造代币。结果，攻击者能够利用该对象并授权将 500,000 个 BLAT 代币转移到五个不同的钱包地址。 </p><div><figure><div><picture><source><img src="https://static.fwimg.io/img/feed/55db5062141e94f12a40962ff06e9227.jpg" alt=""></source></picture><div></div></div></figure></div><div><hr></div><p> 🚨<strong>项目：</strong> RocketSwap<br> ⛓️<strong>链条：</strong>底座<br>💥<strong>类型：</strong>私钥泄露<br>💸<strong>损失金额：</strong> ~869,000 美元</p><p>RocketSwap 被利用的金额约为 869,000 美元。此次泄露是由于暴力攻击导致部署者的私钥暴露。攻击者利用此漏洞，授权将 427 ETH从农场合约转入自己的账户。</p><p>截至撰写本文时，该项目已承认此次攻击，并启动了针对受影响用户的补偿计划。 </p><div><figure><div><picture><source><img src="https://static.fwimg.io/img/1px.png" alt=""></source></picture><div></div></div></figure></div><div><hr></div>

Verichains 每周安全文摘 | 2023 年 8 月 第 4 周

根据VanEck的最新报告，随着矿工“投降”迹象的出现，比特币市场可能正接近短期底部——这一信号曾次预示着之前的触底反弹……

VanEck：比特币可能正在进入短期底部。

根据 CryptoQuant 的最新分析，与全球金融市场中的许多其他资产（尤其是黄金、白银和科技股）相比，比特币明显失去上涨动力。原因在于……

CryptoQuant 指出了比特币为何落后于黄金、白银和科技股的原因。

原创 / Odaily 星球日报（@OdailyChina）
作者 / Wenser（@wenser2010）
作为“加密货币晴雨表”，Strategy 的股价始终牵动市场神经，其表现与现金流稳定性、指数地位等关键因素紧密相连。最新消息显示，12 月 15 日至 21 日，Strategy 通过出售普通股融资 7.48 亿美元，现金储备升至 21.9 亿美元，并已暂停买入比特币；目前公司持有比特币...

Verichains 每周安全文摘 | 2023 年 8 月 第 4 周

上周的事件

Verichains 每周安全文摘 | 2023 年 8 月第 4 周