2023年1月16日

2023年1月16日下午3:43 Midas資本Jan.15暫停借貸活動,邁達斯資本、風險資本組織基金,支持區塊鏈項目成功,宣布暫停借款活動賈維斯多邊形池。用戶被告知的暫停是由於調查可疑交易,包括最近添加的抵押品令牌(WMATIC_STMATIC)。我們目前暫停借款在賈維斯多邊形池https://t。有限公司/ jyjevMVMyF雖然我們調查可疑交易涉及最近添加抵押品令牌WMATIC_STMATIC令牌Midas capital)上周被列入官方網站供應上限為250000。添加標記的團隊討論的公司(賈維斯網絡)添加新選項池應用者。實施供應帽子是預防大借這樣的流動性池令牌,還不夠。來源:大富翁資本大富翁說他們犯了一個錯誤的判斷,因為他們認為僅僅ERC20包裝資產池組成。也相信前麵的返回攻擊不會影響他們在使用原始調用鏈的本機令牌。邁達斯經曆過同樣的事件與省略號當公司推出BNB高度支持LP令牌作為抵押。甲骨文的省略,傳出的信心,已嚴格驅逐行為的原始調用的能力。 Jarvis Network had multiple bugs Ancilia, a web three partner, stated that Jarvis Network had multiple bugs. Re-entry and jFIAT token price fixing are what lead to the loan benefit. The attacker utilized the chance for re-entry during the native token WMATIC in borrowing vast bulk. The whitecap hacker later spent 270k WMATIC as collateral and minted 131JFIAT tokens. 2/ @Jarvis_Network There are multiple bugs. The loan gain are caused by re-entry and price manipulations for jFIAT tokens. Attached screen shot proved the price change(10x) after. During the native token WMATIC send, attacker use the re-entry opportunity to borrow more. pic.twitter.com/OSvsTmiFOU The attacker then generated another contract, utilized one of the ten borrowed amounts to liquidate the debt, and redeemed 103 jFIAT immediately after the price was forced and changed. There was a suspicious questionnaire with Midas price oracle. Nonetheless, the polygon implementing contract was the case of the problem. After investigating the price oracle, Ancilia recognized a price calculation to get a virtual price function that depends on self D in storage slot 0x10. The self D value is usually 0x041a1ba29495fff4fab5bc; however, it is ten times larger when the attack happened.