慢雾发布Cetus被盗2.3亿美元事件分析：黑客用极小Token金额换取巨额流动性资产
2025-05-24 08:09:51
慢雾发布深度分析：Cetus 遭黑客攻击损失2.3亿美元事件技术细节
区块链安全机构慢雾科技近日发布了对Cetus协议遭受2.3亿美元巨额盗窃事件的技术分析报告。报告揭露，此次攻击的核心在于攻击者通过精心构造的交易参数，成功绕过了系统的溢出检测机制。
漏洞技术细节：
攻击者主要利用了get_delta_a函数中checked_shlw存在的溢出检测绕过漏洞。通过这一漏洞，攻击者能够使系统在计算需要添加的haSUI数量时产生严重偏差。由于系统未能正确检测到溢出情况，导致攻击者仅需付出极少量Token（低至1个代币）就能兑换出价值数十亿美元的流动性资产。
攻击手法分析：
这是一次典型的数学溢出漏洞攻击，展示了精确计算和参数构造在智能合约攻击中的威力。攻击者通过深入研究合约代码，找到了checked_shlw函数的缺陷，并利用数学计算上的边界条件漏洞实施了这次精密攻击。
安全建议：
慢雾科技建议所有智能合约开发人员必须严格验证所有数学函数的边界条件，特别是涉及资金计算的函数。同时建议项目方在合约上线前进行全面的安全审计，并建立完善的漏洞赏金计划。
对投资者的影响：
1. 资金安全风险：此类事件直接导致投资者资产损失
2. 市场信心受挫：重大安全事件会影响整个DeFi领域的投资信心
3. 监管关注增加：可能引发更严格的监管审查
4. 投资决策参考：投资者需更重视项目的安全审计记录
5. 保险成本上升：DeFi保险产品可能提高保费
Previous article：
Binance Alpha上线 Orbiter Token (OBT)Next article：
Binance：将为至少拥有200 Alpha积分的用户空投8000枚OBT7x24 Newsflash
08:57 2025-06-12
Ant Digital has launched an application for a Hong Kong stablecoin licenseOn June 12, Qian Zhuoqun, vice president of Ant Group and president of Ant Digital's blockchain business, revealed at the SNEC Shanghai Photovoltaic Exhibition that Ant Digital has started to apply for a Hong Kong stablecoin license and has been in multiple rounds of communication with regulators. It is reported that Ant Digital has listed Hong Kong as its global headquarters this year, and has completed the pilot of the regulatory sandbox in Hong Kong. On the same day, Ant Digital and GCL Nengk...
08:54 2025-06-12
Tencent is reportedly studying a deal to acquire game developer Nexon for $15 billionTencent is reportedly working on a $15 billion deal to acquire game developer Nexon.
08:54 2025-06-12
Boeing (BA. N) fell premarket, falling more than 2%.Boeing (BA. N) fell premarket, falling more than 2%.
08:54 2025-06-12
According to CGTN, 242 passengers were on board the crashed flight in India, and the injured have been taken to hospital. The road near the crash site has been blocked, and the plane crashed after takeoff.According to CGTN, 242 passengers were on board the crashed flight in India, and the injured have been taken to hospital. The road near the crash site has been blocked, and the plane crashed after takeoff.
08:52 2025-06-12
It is reported that the Indian plane crashed during takeoff at the airportOn June 12, according to Indian TV channels on Thursday, an Air India plane crashed at the airport in the western Indian city of Ahmedabad, but did not specify whether there were casualties. A source said the plane was bound for Birmingham, England. According to reports, the crash happened as the plane took off. Footage from the scene showed the wreckage of the plane on fire and smoke rising in the sky near the airport.
08:47 2025-06-12
A plane has crashed in India with more than 100 passengers on boardOn June 12, according to Indian media reports, a plane crashed at Ahmedabad Airport in India on the 12th. It is reported that more than 100 passengers were on board.
08:44 2025-06-12
The 30-minute chart of the order flow shows that gold has gradually recovered lost ground after a sharp decline, and funds are fiercely competing at the current level or suggesting... Click to view the latest changes in the order flow > >The 30-minute chart of the order flow shows that gold has gradually recovered lost ground after a sharp decline, and funds are fiercely competing at the current level or suggesting... Click to view the latest changes in the order flow > >
08:42 2025-06-12
Japanese fashion brand ANAP increases its holdings of 27.5031 bitcoinsAccording to the official announcement, Japanese fashion brand ANAP increased its holdings by 27.5031 bitcoins, bringing its total holdings to 153.4627 bitcoins.
08:35 2025-06-12
According to Iranian state television, Iran will launch a new uranium enrichment facility in a safe area.According to Iranian state television, Iran will launch a new uranium enrichment facility in a safe area.
08:35 2025-06-12
According to Indian media reports, a plane crashed at Ahmedabad Airport in India on the 12th. It is reported that more than 100 passengers were on board.According to Indian media reports, a plane crashed at Ahmedabad Airport in India on the 12th. It is reported that more than 100 passengers were on board.
08:32 2025-06-12
1. Hua Xia Bank successfully issued the largest 5-year commercial bank technology innovation bond in the market. 2. The first batch in China (the first order in Beijing)...1. Hua Xia Bank successfully issued the largest 5-year commercial bank science and technology innovation bond in the market. 2. The first batch of private venture capital institutions in China (the first order in Beijing) held a press conference on the issuance of science and technology innovation bonds. 3. Chongqing Three Gorges Bank successfully issued 3.50 billion yuan of unfixed-term capital bonds with a coupon rate of 2.69%. 4. Sichuan Energy Development Group's 15 billion yuan small public...
08:28 2025-06-12
Iran's state-run TV: Iran denounces the IAEA resolution as a "political" decision with no technical or legal basis.Iran's state-run TV: Iran denounces the IAEA resolution as a "political" decision with no technical or legal basis.
Hot News
Cryptocurrency Payback Calculator - InstructionsVitalik: "DAO" means "project", "official" means "scam"Backpack Exchange已面向英国用户开放其服务派盾：NIBI同名代币发生Rug Pull，损失约31.39万美元香港金管局推出稳定币发行人沙盒CIAN与Lido合作，在Base上推出wstETH Hyper-Staking VaultGate.io 3月储备金总额突破60亿美元，额外储备金超8亿美元Polyhedra Network已于3月12日16时完成ZK空投快照英FCA：不会反对加密资产相关ETN上市请求BTC流通市值突破1.4万亿美元，续创新高Space Nation将于3月底启动OIK代币空投
Related Recommendations
Cryptocurrency Payback Calculator - InstructionsBackpack Exchange已面向英国用户开放其服务派盾：NIBI同名代币发生Rug Pull，损失约31.39万美元香港金管局推出稳定币发行人沙盒CIAN与Lido合作，在Base上推出wstETH Hyper-Staking VaultGate.io 3月储备金总额突破60亿美元，额外储备金超8亿美元Polyhedra Network已于3月12日16时完成ZK空投快照英FCA：不会反对加密资产相关ETN上市请求BTC流通市值突破1.4万亿美元，续创新高Space Nation将于3月底启动OIK代币空投
