您现在的位置是:SushiSwap developer says $1BN bug threats are 'incorrect' >>正文
SushiSwap developer says $1BN bug threats are 'incorrect'
上海品茶网 - 夜上海最新论坛社区 - 上海千花论坛6人已围观
简介The white-hat hacker claims to have gone public after SushiSwap failed to act on the vulnerabilitySu...
The white-hat hacker claims to have gone public after SushiSwap failed to act on the vulnerability
SushiSwap has rejected claims that the decentralised exchange (DEX) platform is at risk of a major security breach that could see more than $1 billion in user funds stolen.
According to a hacker, while the functionality provides for the withdrawal of liquidity provider (LP) tokens, it is shown to fail when the SushiSwap pool holds no rewards.
The hacker alleged that it takes close to 10 hours for the rewards account to refill, with the manual process happening several times a month. As such, over $1 billion in user funds are at risk for about 10 hours.
But according to developer Mudit Gupta, the platform is not currently vulnerable to a security threat and user funds are safe. Reacting to the white-hat hacker's claims on Twitter, the Shadowy Super-Coder noted:
"This is not a vulnerability. No funds at risk. If rewarder runs out of rewards, withdrawing LP will fail but anyone (not just sushi) can top up the rewarder in an emergency."
The developer suggests that the 10-hour timeline the white-hat hacker indicates is not cast in stone and that with anyone being able to refill the pool, no threat exists when the rewarder runs out of funds.
The SushiSwap dev also notes that allegations that a malicious actor can "drain" the rewarder by flooding it with LP were incorrect. He clarified that rewards allocated per liquidity token are reduced when more LP is added.
The claims follow what an anonymous white-hat hacker noted were two instances of vulnerabilities on the SushiSwap platform. Per the hacker, the decentralised finance (DeFi) protocol's emergencyWithdrawfunction relating to the MasterChef v2 and MiniChef v2 contracts puts users at risk because it doesn't work as intended.
The contracts in question hold rewards and LP token pools hosted on platforms such as Binance Smart Chain (BSC), Avalanche and Polygon.
SushiSwap has not released an official statement about the claims, but will certainly look to assure users of fund safety given the DeFi sector has recently witnessed several instances of attacks.
Tags:
转载:欢迎各位朋友分享到网络,但转载请说明文章出处“上海品茶网 - 夜上海最新论坛社区 - 上海千花论坛”。http://www.jz08.com.cn/news/137465.html
相关文章
United Kingdom’s NFT market to hit $9,257 million by 2028
SushiSwap developer says $1BN bug threats are 'incorrect'The United Kingdom’s NFT industry is expected to grow at a CAGR of 34.5% over the next 5-6 yea...
阅读更多
Sparkpool is latest victim of Chinese crypto crackdown
SushiSwap developer says $1BN bug threats are 'incorrect'The real-time Ethereum hash rate connected to Sparkpool drops as the mining pool decides to cease al...
阅读更多
The role of blockchain in the future of online gaming
SushiSwap developer says $1BN bug threats are 'incorrect'The online gaming industry is rapidly evolving, and with the growth in popularity of online gaming,...
阅读更多
热门文章
- Regulatory Hurdles Could Push Ripple Out Of US, Says Exec
- Where to buy IOTA as MIOTA registers 4.56% rise
- Filecoin price fluctuating around $60 after sharp rise as mainnet went live
- Kenya, Nigeria among leaders in Africa's crypto space
- OCC: National Banks Authorised For Some Stablecoin Handling
- Bonk price has soared: prepare for a major dive
最新文章
Cardano ADA gives early signals of a rally. Is this a good opportunity?
Planeteer unveils the Planeteer Social Token (PTS)
LUNA price could moon after Columbus
Bitcoin holds $16K as markets edged towards 2022 close
Ethereum Price Prediction: ETH forecast raised to $2,000
Alchemy Pay (ACH) risk/reward seems unfavorable for now