2024

Seneca

Bitcoin

Read

<p class="is-style-lead">Seneca Protocol saw a significant security breach, resulting in a dramatic 65% drop in the value of its native SEN token.&nbsp;</p>
<p>According to <a href="https://twitter.com/CertiKAlert/status/1762871285036511328" target="_blank" rel="noopener noreferrer nofollow">CertiK</a>, the attacker initially exploited a vulnerability in the protocol to steal around $3 million worth of digital assets. The attacker transferred 1,000 ETH across two externally owned accounts (EOAs), escalating the estimated loss to approximately $6.4 million.</p>
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper">
  <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
   <p lang="en" dir="ltr"><a href="https://twitter.com/hashtag/CertiKSkynetAlert?src=hash&amp;ref_src=twsrc%5Etfw" target="_blank" rel="noopener noreferrer nofollow">#CertiKSkynetAlert</a> 🚨<br><br>We are seeing an exploit on <a href="https://twitter.com/SenecaUSD?ref_src=twsrc%5Etfw" target="_blank" rel="noopener noreferrer nofollow">@SenecaUSD</a> <br><br>Exploiter has stolen at least ~$3m worth of assets<br><br>All users should revoke the following addresses<br>0xbc83f2711d0749d7454e4a9d53d8594df0377c05<br>0x2d99e1116e73110b88c468189aa6af8bb4675ec9 <a href="https://t.co/iVhDhGwUc8" target="_blank" rel="noopener noreferrer nofollow">pic.twitter.com/iVhDhGwUc8</a></p>— CertiK Alert (@CertiKAlert) <a href="https://twitter.com/CertiKAlert/status/1762871285036511328?ref_src=twsrc%5Etfw" target="_blank" rel="noopener noreferrer nofollow">February 28, 2024</a>
  </blockquote>
  <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script>
 </div>
</figure>
<p>You might also like: <a href="https://crypto.news/coinbase-crash-bitcoin-zeroes/" rel="noopener noreferrer nofollow"> Coinbase crashes during Bitcoin rally as users see zeroes </a></p>
<p>The core of the vulnerability was in a function within the Seneca protocol’s smart contract code named ‘performOperations.’ This function, accessible to external calls, meaning anyone could trigger it, lacked proper validation for its received inputs.</p>
<p>The absence of input validation is a significant security oversight in smart contract development.</p>
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper">
  <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
   <p lang="en" dir="ltr">We are actively working with security specialists to investigate the approval bug found today.<br><br>In the meantime, REVOKE approvals for the following addresses:<a href="https://twitter.com/hashtag/Ethereum?src=hash&amp;ref_src=twsrc%5Etfw" target="_blank" rel="noopener noreferrer nofollow">#Ethereum</a><br>PT-ezETH 0x529eBB6D157dFE5AE2AA7199a6f9E0e9830E6Dc1<br>apxETH 0xD837321Fc7fabA9af2f37EFFA08d4973A9BaCe34…</p>— Seneca (@SenecaUSD) <a href="https://twitter.com/SenecaUSD/status/1762886130561630227?ref_src=twsrc%5Etfw" target="_blank" rel="noopener noreferrer nofollow">February 28, 2024</a>
  </blockquote>
  <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script>
 </div>
</figure>
<p>The attacker developed a specific data sent to this function and triggered a condition that allowed the hacker to invoke any other contract on the blockchain with arbitrary data. This highly dangerous capability gives the attacker free rein to interact with other contracts disguised as vulnerable ones. The attacker then transferred assets from addresses previously authorized to the now-vulnerable contracts.&nbsp;</p>
<p>Seneca (SEN) operates as an omnichain Collateral Debt Position protocol for yield-bearing assets. Using supported collateral assets allows users to borrow the collateralized stablecoin, senUSD. The SEN token has various utilities, including governance, trading tax redistribution, and protocol fee redistribution through staking.&nbsp;</p>
<p>Read more: <a href="https://crypto.news/bitfinex-hacker-tactics-court/" rel="noopener noreferrer nofollow"> Bitfinex hacker turns government witness, explains tactics used in 2016 theft </a></p>

Seneca Protocol experiences $6m breach, SEN drops 65%

crypto.news

2024年2月28日公開の他の記事

Ethereum (ETH) Bulls Eyeing $4,000 Mark Whilst DeeStream (DST) Presale Gains Support from Uniswap...

Bitcoin’s Surge: What’s Needed for Continued Growth?

Is the Personalized Web Experience the Future of Online Exploration?

Polkadot (DOT) declines while more Ethereum (ETH) holders add Kelexo (KLXO) DeFi lending solution...

Polygon and Chainlink ride on Algotech’s presale wave!

5 Best Dogecoin Casinos in 2024

ニュースレターを購読して暗号資産の最新情報を毎日入手！