BTC $79,283.05 +1.79%
ETH $2,476.25 +0.04%
BNB $699.16 -0.27%
XRP $1.48 -0.34%
SOL $99.53 +4.98%
TRX $0.3423 -0.46%
DOGE $0.0906 -0.79%
ADA $0.2193 -0.35%
BCH $270.22 -0.21%
LINK $11.55 -0.33%
HYPE $80.75 +2.50%
AAVE $129.50 -5.07%
SUI $0.8011 -2.79%
XLM $0.1928 -1.10%
ZEC $840.37 +0.36%
BTC $79,283.05 +1.79%
ETH $2,476.25 +0.04%
BNB $699.16 -0.27%
XRP $1.48 -0.34%
SOL $99.53 +4.98%
TRX $0.3423 -0.46%
DOGE $0.0906 -0.79%
ADA $0.2193 -0.35%
BCH $270.22 -0.21%
LINK $11.55 -0.33%
HYPE $80.75 +2.50%
AAVE $129.50 -5.07%
SUI $0.8011 -2.79%
XLM $0.1928 -1.10%
ZEC $840.37 +0.36%

USM 遭遇攻击,损失约 70.83 枚 ETH

2026-08-10 10:51:48

ChainCatcher 消息,USM 合约 defund() 赎回函数中的 ethFromDefund() 定价逻辑存在缺陷。该函数在单次赎回计算中,采用当前 FUM 卖出价与预估终期 FUM 卖出价的算术平均值核算对价,但该算法不具备拆分不变性。

叠加单次赎回附带的状态收缩系数 adjShrinkFactor 与整数取整机制后,同等数量的 FUM 资产拆分为 64 次小额赎回操作,最终可提取的以太坊总量将远高于一次性大额赎回所得。

app_icon
ChainCatcher 与创新者共建Web3世界