BBX Logo Beta

--

[ether.fi loses approximately 15.45 ETH due to an access control vulnerability in the AtomicQueue contract] According to a security alert from SlowMist, ether.fi's AtomicQueue contract suffered a theft of approximately 15.45 ETH due to the lack of access control in the `solve()` function. The attacker exploited the `updateAtomicRequest()` function to create malicious requests, forcing the victim's address to act as the solver. Subsequently, AtomicQueue invoked the victim's `finishSolve` and executed `want.transferFrom`, abusing the victim's existing ERC-20 authorization to transfer funds. SlowMist privately disclosed the issue to the ether.fi team beforehand, and the attacker's address along with the vulnerable contract address have been made public.

7 x 24 快訊

更多 >
今天 2026-11-06
03:00

韩国政府决定豁免证券公司信用融资 140% 担保比例要求 3 个月

02:59

某巨鲸开多 3100 万美元美光(MU),目前浮亏 312 万美元

02:57

Jeff Dorman:Hyperliquid 是首个实现公链、DEX 和稳定币收益的项目

02:55

iOS 漏洞利用工具包 DarkSword 致加密用户损失 557 万美元,赵长鹏呼吁更新系统

02:49

Zcash NU7 升级已在主网激活