Beosin: Analysis of the Causes of the Terra Chain Incident Vulnerability

robot
Abstract generation in progress

Odaily Planet Daily News According to Beosin Alert monitoring and early warning, the Terra chain has been temporarily suspended due to emergency upgrades. It seems that someone has exploited the IBC vulnerability to mint long tokens on Terra, including ASTRO. Beosin's security team analyzed that after the attacker instantiated the contract on Terra, they used the reentry vulnerability of timeout pullback in ibc-hooks, and have transferred approximately 60 million ASTRO, 3.5 million USDC, 500,000 USDT, and 2.7 BTC. This vulnerability was disclosed in April this year and belongs to the vulnerability in the Cosmos basic library, but Terra did not fix it.

View Original
This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.
  • Reward
  • Comment
  • Share
Comment
0/400
No comments
Trade Crypto Anywhere Anytime
qrCode
Scan to download Gate app
Community
English
  • 简体中文
  • English
  • Tiếng Việt
  • 繁體中文
  • Español
  • Русский
  • Français (Afrique)
  • Português (Portugal)
  • Bahasa Indonesia
  • 日本語
  • بالعربية
  • Українська
  • Português (Brasil)