In this week’s digest, the DeFi market experienced a substantial loss of more than $3,000,000 through a series of attacks such as private key compromises, access control breaches, and price manipulations. Among these incidents, the Zunami Protocol incurred the most significant impact, suffering a loss of $2,000,000.

<p>In this week’s digest, the DeFi market experienced a substantial loss of more than $3,000,000 through a series of attacks such as private key compromises, access control breaches, and price manipulations. Among these incidents, the Zunami Protocol incurred the most significant impact, suffering a loss of $2,000,000.</p><div><figure><a href="https://substackcdn.com/image/fetch/f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2Fc1d2976d-9dea-468a-bec3-a1a1b82163d2_1890x1361.png" rel="nofollow"><div><picture><source><img src="https://static.fwimg.io/img/feed/360496890bc80d70761c58acc3f96468.jpg" alt=""></source></picture><div></div></div></a></figure></div><div><hr></div><h2>Last Week’s Incidents</h2><p>🚨<strong>Project:</strong> Zunami Protocol <br>⛓️<strong>Chain:</strong> Ethereum <br>💥<strong>Type:</strong> Price Manipulation <br>💸<strong>Loss amount:</strong> ~$2,000,000</p><p>In the largest hack last week, Zunami Protocol suffered a substantial loss of more than $2,000,000 due to a price manipulation attack. The attack involves an inaccurate calculation of LP price, which is influenced by factors such as the quantity of "sdt" tokens held in the "MIMCurveStakeDao" liquidity pool. The attacker strategically donates a significant amount of "sdt" tokens to artificially inflate the LP price, aiming to exploit this manipulation.</p><div><figure><a href="https://substackcdn.com/image/fetch/f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2F01b6bcab-fa05-4b09-8a8d-dfdbb05ef191_1278x346.png" rel="nofollow"><div><picture><source><img src="https://static.fwimg.io/img/feed/6ea68f7c36961fbc168894f47a837861.jpg" alt=""></source></picture><div></div></div></a></figure></div><div><figure><a href="https://substackcdn.com/image/fetch/f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2F8bb14dde-01c3-43f4-ad6f-af704493eaaa_1004x470.png" rel="nofollow"><div><picture><source><img src="https://static.fwimg.io/img/feed/91d161f70abf039ac7b05e7b934f7905.jpg" alt=""></source></picture><div></div></div></a></figure></div><div><figure><a href="https://substackcdn.com/image/fetch/f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2F292f6606-a90f-47f1-9204-6d305c9e93c3_1604x992.png" rel="nofollow"><div><picture><source><img src="https://static.fwimg.io/img/feed/42b3ccc5c2f6ee57f38427b27740e723.jpg" alt=""></source></picture><div></div></div></a></figure></div><p>In response to the breach, the project has made a commitment to rectify and enhance the omnipool and zStable systems. Additionally, they have pledged to restore all zStables collateral to holders.</p><div><hr></div><p>🚨<strong>Project:</strong> BeLaunch <br>⛓️<strong>Chain:</strong> SUI <br>💥<strong>Type:</strong> Access Control <br>💸<strong>Loss amount:</strong> ~$300,000</p><p>Last week, BeLaunch was attacked for roughly $35,000 due to a vulnerability in their smart contract. The contract included a publicly shared <strong>TreasuryCap</strong> object during its initialization. This object seemingly allowed anyone to interact with the contract and mint tokens. As a result, the attacker was able to exploit this object and authorize the transfer of 500,000 BLAT tokens to five different wallet addresses.</p><div><figure><a href="https://substackcdn.com/image/fetch/f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2F25f61579-970b-4c67-b84a-370e75cd1fc4_1998x864.png" rel="nofollow"><div><picture><source><img src="https://static.fwimg.io/img/feed/55db5062141e94f12a40962ff06e9227.jpg" alt=""></source></picture><div></div></div></a></figure></div><div><hr></div><p>🚨<strong>Project:</strong> RocketSwap <br>⛓️<strong>Chain:</strong> Base <br>💥<strong>Type:</strong> Compromised Private Key <br>💸<strong>Loss amount:</strong> ~$869,000</p><p>RocketSwap was exploited for roughly $869,000. This breach was a result of a brute force attack that exposed the deployer’s private key. The attacker took advantage of this vulnerability and authorized the transfer of 427 ETH from the farm contracts into their own account.</p><p>At the time of writing, the project had acknowledged the attack and had since initiated a compensation program for affected users.</p><div><figure><a href="https://substackcdn.com/image/fetch/f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2Fa299038d-b501-4c2c-9102-3c06c59410e1_593x321.png" rel="nofollow"><div><picture><source><img src="https://static.fwimg.io/img/1px.png" alt=""></source></picture><div></div></div></a></figure></div><div><hr></div>

Verichains Weekly Security Digest | August 2023 Week 4

在本週的摘要中，由於私鑰洩露、訪問控制違規和價格操縱等一系列攻擊，DeFi 市場經歷了超過 300 萬美元的巨額損失。其中，Zunami協議受到的影響最為嚴重，損失達200萬美元。

<p>在本週的摘要中，由於私鑰洩露、訪問控制違規和價格操縱等一系列攻擊，DeFi 市場經歷了超過 300 萬美元的鉅額損失。其中，Zunami協議受到的影響最為嚴重，損失達200萬美元。 </p><div><figure><div><picture><source><img src="https://static.fwimg.io/img/feed/360496890bc80d70761c58acc3f96468.jpg" alt=""></source></picture><div></div></div></figure></div><div><hr></div><h2>上週的事件</h2><p>🚨<strong>項目：</strong> Zunami 協議<br>⛓️<strong>鏈：</strong>以太坊<br>💥<strong>型別：</strong>價格操縱<br>💸<strong>損失金額：</strong> ~$2,000,000</p><p>在上週最大的黑客攻擊中，Zunami Protocol 由於價格操縱攻擊而遭受了超過 2,000,000 美元的鉅額損失。此次攻擊涉及 LP 價格計算不準確，該價格受到“MIMCurveStakeDao”流動性池中持有的“sdt”代幣數量等因素的影響。攻擊者戰略性地捐贈大量“sdt”代幣，人為抬高 LP 價格，旨在利用這種操縱行為。 </p><div><figure><div><picture><source><img src="https://static.fwimg.io/img/feed/6ea68f7c36961fbc168894f47a837861.jpg" alt=""></source></picture><div></div></div></figure></div><div><figure><div><picture><source><img src="https://static.fwimg.io/img/feed/91d161f70abf039ac7b05e7b934f7905.jpg" alt=""></source></picture><div></div></div></figure></div><div><figure><div><picture><source><img src="https://static.fwimg.io/img/feed/42b3ccc5c2f6ee57f38427b27740e723.jpg" alt=""></source></picture><div></div></div></figure></div><p>針對此次違規行為，該項目承諾糾正和增強omnipool和zStable系統。此外，他們還承諾將所有 zStables 抵押品歸還給持有人。</p><div><hr></div><p> 🚨<strong>項目：</strong> BeLaunch<br> ⛓️<strong>鏈：</strong> Sui<br> 💥<strong>型別：</strong>訪問控制<br>💸<strong>損失金額：</strong> ~$300,000</p><p>上週，BeLaunch 由於智慧合約中的漏洞而遭受了約 35,000 美元的攻擊。該合約在初始化期間包含一個公開共享的<strong>TreasuryCap</strong>物件。這個物件似乎允許任何人與合約互動並鑄造代幣。結果，攻擊者能夠利用該物件並授權將 500,000 個 BLAT 代幣轉移到五個不同的錢包地址。 </p><div><figure><div><picture><source><img src="https://static.fwimg.io/img/feed/55db5062141e94f12a40962ff06e9227.jpg" alt=""></source></picture><div></div></div></figure></div><div><hr></div><p> 🚨<strong>項目：</strong> RocketSwap<br> ⛓️<strong>鏈條：</strong>底座<br>💥<strong>型別：</strong>私鑰洩露<br>💸<strong>損失金額：</strong> ~869,000 美元</p><p>RocketSwap 被利用的金額約為 869,000 美元。此次洩露是由於暴力攻擊導致部署者的私鑰暴露。攻擊者利用此漏洞，授權將 427 ETH從農場合約轉入自己的賬戶。</p><p>截至撰寫本文時，該項目已承認此次攻擊，並啟動了針對受影響使用者的補償計劃。 </p><div><figure><div><picture><source><img src="https://static.fwimg.io/img/1px.png" alt=""></source></picture><div></div></div></figure></div><div><hr></div>

Verichains 每週安全文摘 | 2023 年 8 月 第 4 周

根據VanEck的最新報告，隨著礦工“投降”跡象的出現，比特幣市場可能正接近短期底部——這一信號曾次預示著之前的觸底反彈……

VanEck：比特幣可能正在進入短期底部。

根據 CryptoQuant 的最新分析，與全球金融市場中的許多其他資產（尤其是黃金、白銀和科技股）相比，比特幣明顯失去上漲動力。原因在於……

CryptoQuant 指出了比特幣為何落後於黃金、白銀和科技股的原因。

原創 / Odaily 星球日報（@OdailyChina）
作者 / Wenser（@wenser2010）
作為“加密貨幣晴雨表”，Strategy 的股價始終牽動市場神經，其表現與現金流穩定性、指數地位等關鍵因素緊密相連。最新消息顯示，12 月 15 日至 21 日，Strategy 通過出售普通股融資 7.48 億美元，現金儲備升至 21.9 億美元，並已暫停買入比特幣；目前公司持有比特幣...

Verichains 每週安全文摘 | 2023 年 8 月 第 4 周

上週的事件

Verichains 每週安全文摘 | 2023 年 8 月第 4 周