The AIZPT Token suffered an exploit on October 5, 2024, resulting in an estimated loss of approximately $20,000 at the time of the exploit.

<p>The <strong>AIZPT Token</strong> suffered an exploit on October 5, 2024, resulting in an estimated loss of approximately $20,000 at the time of the exploit. The root cause of the exploit was the incorrect implementation of price calculation during token purchases.</p><h2>Overview</h2><p>Attacker Contract: <a href="https://bscscan.com/address/0x8408497c18882bfb61be9204cfff530f4ee18320" rel="nofollow">https://bscscan.com/address/0x8408497c18882bfb61be9204cfff530f4ee18320</a></p><p>Vulnerable Contract: <a href="https://bscscan.com/address/0xbe779d420b7d573c08eee226b9958737b6218888" rel="nofollow">https://bscscan.com/address/0xbe779d420b7d573c08eee226b9958737b6218888</a></p><p>Transaction attack: <a href="https://bscscan.com/tx/0x5e694707337cca979d18f9e45f40e81d6ca341ed342f1377f563e779a746460d" rel="nofollow">https://bscscan.com/tx/0x5e694707337cca979d18f9e45f40e81d6ca341ed342f1377f563e779a746460d</a></p><h2>Exploit Analysis</h2><p>The <strong>AIZPT Token</strong> contract allows users to buy and sell tokens directly, with a 50% fee applied when buying tokens and 50% of the tokens burned when selling.</p><p>The problem lies in the formula used for buying tokens. They use the formula of the <strong>quote</strong> function from <strong>Uniswap V2</strong>. While this function is useful for understanding reserve ratios or liquidity, it is not suitable for determining actual trade prices. </p><p>With this formula, users can exploit the system by buying tokens at a low price and selling them at a high price to take profit (even after being charged a 50% fee) using the sell function, which employs the <strong>getAmountOut</strong> formula from <strong>Uniswap V2</strong>.</p><div><figure><a href="https://substackcdn.com/image/fetch/f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2F76f5ed27-9a8b-49d9-b0b3-da0041414c63_1682x1224.png" rel="nofollow"><div><picture><source><img src="https://static.fwimg.io/img/feed/2063808ce4feeb8ac170ede57755b086.jpg" alt=""></source></picture><div><div><div></div><div></div></div></div></div></a></figure></div><p>The attacker flash-loaned 8000 <strong>BNB</strong> and used it to buy <strong>AIZPT</strong> tokens. They then sold the tokens multiple times, earning a profit of 34.88 <strong>BNB</strong>.</p><div><figure><a href="https://substackcdn.com/image/fetch/f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2F8b8e1759-b57b-429a-b46b-95f6041c12d4_2390x1056.png" rel="nofollow"><div><picture><source><img src="https://static.fwimg.io/img/feed/37ba266c1cdb0b449565dd8e2aacfaa6.jpg" alt=""></source></picture><div><div><div></div><div></div></div></div></div></a></figure></div><h2>Lesson learned</h2><p>Developers must thoroughly review and understand the logic of third-party contracts when integrating them with their custom logic to prevent any inconsistencies.</p><p>It is strongly recommended to <strong>conduct a security audit</strong>, whether it is a simple <strong>ERC20</strong> contract with some minor changes or a complex <strong>DeFi</strong> protocol with hundreds of thousands of lines of code.</p>

AIZPT Token Hack Analysis

<AIZPT>代幣</AIZPT>在2024年10月5日遭受了一次漏洞攻擊,導致當時損失約20,000美元。

<p><strong>AIZPT代幣</strong>在2024年10月5日遭受了一次攻擊,導致當時約20,000美元的損失。攻擊的根源在於在代幣購買過程中,價格計算的實現存在問題。</p><h2>概述</h2><p>攻擊者合約: <a href="https://bscscan.com/address/0x8408497c18882bfb61be9204cfff530f4ee18320" rel="nofollow">https://bscscan.com/address/0x8408497c18882bfb61be9204cfff530f4ee18320</a></p><p>漏洞合約: <a href="https://bscscan.com/address/0xbe779d420b7d573c08eee226b9958737b6218888" rel="nofollow">https://bscscan.com/address/0xbe779d420b7d573c08eee226b9958737b6218888</a></p><p>攻擊交易: <a href="https://bscscan.com/tx/0x5e694707337cca979d18f9e45f40e81d6ca341ed342f1377f563e779a746460d" rel="nofollow">https://bscscan.com/tx/0x5e694707337cca979d18f9e45f40e81d6ca341ed342f1377f563e779a746460d</a></p><h2>攻擊分析</h2><p><strong>AIZPT代幣</strong>合約允許使用者直接買賣代幣,買入時收取50%的費用,賣出時銷燬50%的代幣。</p><p>問題出在買入代幣時使用的公式。他們使用了<strong>Uniswap V2</strong>的<strong>quote</strong>函式公式。這個函式適用於理解儲備比率或流動性,但不適合確定實際交易價格。</p><p>使用這個公式,使用者可以透過以低價買入代幣,然後使用<strong>Uniswap V2</strong>的<strong>getAmountOut</strong>公式以高價賣出代幣來獲利(即使要支付50%的費用)。</p><div><figure><a href="https://substackcdn.com/image/fetch/f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2F76f5ed27-9a8b-49d9-b0b3-da0041414c63_1682x1224.png" rel="nofollow"><div><picture><source><img src="https://static.fwimg.io/img/feed/2063808ce4feeb8ac170ede57755b086.jpg" alt=""></source></picture><div><div><div></div><div></div></div></div></div></a></figure></div><p>攻擊者閃電貸了8000 <strong>BNB</strong>,用它來購買<strong>AIZPT</strong>代幣。然後多次賣出這些代幣,獲得了34.88 <strong>BNB</strong>的利潤。</p><div><figure><a href="https://substackcdn.com/image/fetch/f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2F8b8e1759-b57b-429a-b46b-95f6041c12d4_2390x1056.png" rel="nofollow"><div><picture><source><img src="https://static.fwimg.io/img/feed/37ba266c1cdb0b449565dd8e2aacfaa6.jpg" alt=""></source></picture><div><div><div></div><div></div></div></div></div></a></figure></div><h2>經驗教訓</h2><p>開發人員在將第三方合約整合到自定義邏輯中時,必須徹底審查和理解其邏輯,以防止任何不一致。</p><p>強烈建議進行<strong>安全審計</strong>,無論是簡單的<strong>ERC20</strong>合約還是複雜的<strong>DeFi</strong>協議,都應該進行審計。</p>

AIZPT 代幣黑客分析

在加密世界，真正決定勝負的從來不是代碼，而是流動性、權力與監管之間的博弈。BUSD 的興衰，並不是一枚穩定幣的血淚史，而是一場關於交易所如何試圖“統一天下”的金融戰爭。
當 BUSD 被推上歷史舞臺，它承載的不只是合規敘事，更是幣安試圖用高壓手段重塑穩定幣秩序的野心——通過強制匯率、合併交易對，把競爭對手的深度直接吞進自己的賬本。
2022 年的“自動轉換”，是一場教科書級別的閃擊戰；而 2023...

幣安霸權興衰錄：從BUSD“大一統”到$U“吞天下”的穩定幣戰爭

來源：Galaxy Research；翻譯：金色財經xz
比特幣2025年的收官價位預計將與年初水平大體持平。
今年前十個月，加密貨幣市場經歷了一輪真正的看漲浪潮。監管改革持續推進，ETF持續吸納資金，鏈上活動也日趨活躍。比特幣在10月6日創下126,080美元的歷史新高。
然而，市場在狂熱情緒後並未迎來期待的突破，取而代之的是輪動、重定價和再平衡。宏觀預期的落空、投資敘事的轉向、槓桿的爆倉以及巨...

Galaxy：2026年加密市場26大預測

2025 年最後幾個月，熊市的氣氛開始蔓延。
比特幣從 12 萬美元的高點滑落，ETF 流入一度斷檔，各類幣種走勢分化，曾經引爆情緒的 Meme 幣也開始無人問津。和 2021 年末相比，這次沒有突如其來的監管打擊，且除了 1011 大暴跌，似乎也沒有嚴重的流動性危機，卻依然讓人覺得哪裡不對勁。
如果說，2025 年的加密世界，是一場關於真假價值的重新校準，那麼 2026 年加密會好嗎？
這篇文章...