The @SolvProtocol BitcoinReserveOffering contract was reportedly exploited, resulting in a loss of ~$2.7M. The root cause is a reentrancy issue caused by an unintended interaction between mint() and the ERC721 receiver callback.
When redeeming the entire value of an ERC-3525 SFT, the contract transferred the SFT via safeTransferFrom (doSafeTransferIn), triggering onERC721Received. The callback immediately minted BRO based on the SFT value. After returning, mint() resumed and minted BRO again for the same value, effectively double-counting the asset.
By repeatedly cycling burn → mint, the attacker amplified their BRO balance, inflating a small initial amount into a large supply and ultimately exchanging it for SolvBTC to realize the profit.
Attack TX:
https://app.blocksec.com/phalcon/explorer/tx/eth/0x44e637c7d85190d376a52d89ca75f2d208089bb02b7c4708ad2aaae3a97a958d…

Incident Update: BRO Vault
A limited exploit occurred in one of our BRO vaults, affecting a very small number of users (<10).
The impacted amount is 38.0474 SolvBTC.
All other vaults and user funds remain secure and unaffected. We're actively investigating with top security

Solv Protocol

Twitter

據報道，@SolvProtocol BitcoinReserveOffering 合約遭到攻擊，造成約 270 萬美元的損失。根本原因是 mint() 函數與 ERC721 接收器回調函數之間意外交互導致的重入漏洞。

當贖回 ERC-3525 SFT 的全部價值時，合約通過 safeTransferFrom (doSafeTransferIn) 函數轉移 SFT，觸發了 onERC721Received 回調函數。回調函數立即根據 SFT 的價值鑄造了 BRO。回調函數返回後，mint() 函數恢復運行，再次鑄造了相同價值的 BRO，導致資產被重複計算。

攻擊者通過反覆執行銷燬 → 鑄造操作，不斷增加其 BRO 餘額，將初始的小額 BRO 膨脹成大量的 BRO，最終將其兌換成 SolvBTC 以獲利。

攻擊交易：

https://app.blocksec.com/phalcon/explorer/tx/eth/0x44e637c7d85190d376a52d89ca75f2d208089bb02b7c4708ad2aaae3a97a958d…

微策略（Strategy）創辦人 Michael Saylor 斷言比特幣已贏得全球敘事戰，同時點名 BIP- […]
〈Michael Saylor 警告 BIP-110 是比特幣最大威脅；四年週期已死、機構資本才是真主角〉這篇文章最早發佈於動區BlockTempo《動區動趨-最具影響力的區塊鏈新聞媒體》。

Michael Saylor 警告 BIP-110 是比特幣最大威脅；四年週期已死、機構資本才是真主角

全球黃金外匯儲備總額已達約 4 兆美元，首次超越外國持有的美國公債（約 3.9 兆美元），這是 1996 年以 […]
〈黃金 30 年來首度超越美債！躍升全球最大外匯儲備，央行資產配置邏輯為何重寫？〉這篇文章最早發佈於動區BlockTempo《動區動趨-最具影響力的區塊鏈新聞媒體》。

黃金 30 年來首度超越美債！躍升全球最大外匯儲備，央行資產配置邏輯為何重寫？

《富爸爸，窮爸爸》作者羅伯特·清崎（Robert Kiyosaki）今（5）日在 X 平台發文，以「壞訊息：歷 […]
〈富爸爸：1974 年埋下的兩顆炸彈在今年引爆，石油美元鬆動、嬰兒潮退休崩盤〉這篇文章最早發佈於動區BlockTempo《動區動趨-最具影響力的區塊鏈新聞媒體》。