一名黑客在 DeFi 桥上将 25 美分的比特币变成了 460 亿个假 BTC 代币
核心要点
- A post-mortem published early Tuesday shows how two software flaws in the Symbiosis’ Bitcoin Bridge combined to let an attacker create enormous amount
Printing 46 billion fake bitcoin BTC $ 76,878.05-linked tokens on cross-chain application Symbiosis started with a deposit of just 330 satoshi, the smallest unit of bitcoin, worth about 25 cents in total.
该服务允许用户在最初可能不支持的区块链之间交换代币。 A post-mortem published early Tuesday shows how two software flaws in the Symbiosis’ Bitcoin Bridge combined to let an attacker create enormous amounts of syBTC, a token meant to represent bitcoin held by the system.
Blockchain data reviewed by CoinDesk shows the attacker processed 12 bogus deposits across BNB Chain, Ethereum and Rootstock in roughly four minutes, eventually creating about 46.1 billion syBTC, or more than 2,000 times Bitcoin's 21 million coin limit.
The bridge looked at the wrong part of a bitcoin transaction when deciding who had sent the money, allowing the attacker to persuade the system to treat them as both an approved depositor and the bridge administrator, according to Symbiosis.