បច្ចេកវិទ្យា

ការកេងប្រវ័ញ្ចរបស់ Hope Finance បណ្តាលឱ្យមានការលួច $2M ពីមូលនិធិរបស់អ្នកប្រើប្រាស់

02/22/2023
ព័ត៌មាន Bitcoin Ethereum

Prospective users of an Arbitrum-based decentralized finance (DeFi) project have been left out of pocket following a $2 million exploit.

ក្រុមហ៊ុនសន្តិសុខ Web3 CertiK បានដាក់ទង់ឧបទ្ទវហេតុនេះនៅថ្ងៃទី 21 ខែកុម្ភៈ បន្ទាប់ពីការប្រកាសពីគណនី Hope Finance Twitter ជូនដំណឹងដល់អ្នកប្រើប្រាស់អំពីការបោកប្រាស់។

Details of the project are difficult to come by. The platform’s Twitter account was launched in January 2023 and outlined plans for an algorithmic stablecoin called Hope token (HOPE), which dynamically adjusts its supply relative to the price of Ether (សាកលវិទ្យាល័យ ETH).

Posts on the account allege that a Nigerian national had executed the scam and transferred over $1.86 million to Tornado Cash shortly after the platform went live on Feb. 20. A member of the CertiK team told Cointelegraph that the scammer had changed the details of the smart contract, which led to funds being drained from Hope Finance genesis protocol:

"វាហាក់ដូចជាអ្នកបោកប្រាស់បានផ្លាស់ប្តូរកិច្ចសន្យា TradingHelper ដែលមានន័យថានៅពេលដែល 0x4481 ហៅ OpenTrade នៅលើ GenesisRewardPool មូលនិធិត្រូវបានផ្ទេរទៅឱ្យអ្នកបោកប្រាស់។"

According to a tweet dated Feb. 13, the Hope Finance smart contract was audited by a Cognitos official. Cointelegraph ពិនិត្យ the audit summary, which flagged two major contract function vulnerabilities. 

Cognitos audit of Hope Finance’s smart contract. Source: Cognitos

This included an incorrect modifier and the possibility of reentrancy attacks. Despite flagging these vulnerabilities, Cognitos found that the smart contract code had passed the audit successfully.

Following the scam, Hope Finance shared information with users to withdraw staked liquidity from the protocol through an emergency withdrawal function.

អាបធ្មប់ is an Ethereum layer 2 roll-up network that enables exponential scaling of smart contracts. Alongside Optimism, the two layer-2 protocols continue to handle an increasing amount of transactions within the Ethereum ecosystem.