News list for "r0ar"

SlowMist: The root cause of the vulnerability of The R0AR is the existence of a backdoor in the contract

SlowMist issued a security alert, saying that the root cause of The R0AR vulnerability is the existence of a backdoor in the contract. During the deployment process, the R0ARStaking contract tampered with the balance (user.amount) of the specified address by directly modifying the storage slot. Subsequently, the attacker withdrew all the funds in the contract through the emergency withdrawal function.

clock
2025-04-16 08:17:07
慢雾:The R0AR 的漏洞根本原因是合约中存在后门

慢雾发布安全警报,称 The R0AR 漏洞根本原因是合约中存在后门,在部署过程中,R0ARStaking 合约通过直接修改存储槽位,篡改了指定地址的余额(user.amount)。随后,攻击者通过紧急提现函数提取了合约中的所有资金。

clock
2025-04-16 08:17:07