On April 21, KiloEx released the root cause analysis and post-event summary of the hacking incident. The cause of the incident was that the TrustedForwarder contract in its smart contract inherited the OpenZeppelin MinimalForwarderUpgradeable but did not override the execute method, resulting in the function being arbitrarily called. The attack took place between 18:52 and 19:40 (UTC) on April 14. The hackers carried out the attack by deploying attack contracts on multiple chains such as opBNB, ...
4月21日消息,KiloEx 发布黑客事件根本原因分析和事后总结,事件起因是其智能合约中的 TrustedForwarder 合约继承了 OpenZeppelin 的 MinimalForwarderUpgradeable 但未重写 execute 方法,导致该函数可被任意调用。 攻击发生于 4 月 14 日 18:52 至 19:40(UTC),黑客通过在 opBNB、Base、BSC、Taiko、B2 和 Manta 等多个链上部署攻击合约实施攻击。经过协商,黑客同意保留 10% 赏金,并已将所有被盗资产(包括 US...