您现在的位置是:SushiSwap developer says $1BN bug threats are 'incorrect' >>正文
SushiSwap developer says $1BN bug threats are 'incorrect'
上海品茶网 - 夜上海最新论坛社区 - 上海千花论坛5人已围观
简介The white-hat hacker claims to have gone public after SushiSwap failed to act on the vulnerabilitySu...
The white-hat hacker claims to have gone public after SushiSwap failed to act on the vulnerability
SushiSwap has rejected claims that the decentralised exchange (DEX) platform is at risk of a major security breach that could see more than $1 billion in user funds stolen.
According to a hacker, while the functionality provides for the withdrawal of liquidity provider (LP) tokens, it is shown to fail when the SushiSwap pool holds no rewards.
The hacker alleged that it takes close to 10 hours for the rewards account to refill, with the manual process happening several times a month. As such, over $1 billion in user funds are at risk for about 10 hours.
But according to developer Mudit Gupta, the platform is not currently vulnerable to a security threat and user funds are safe. Reacting to the white-hat hacker's claims on Twitter, the Shadowy Super-Coder noted:
"This is not a vulnerability. No funds at risk. If rewarder runs out of rewards, withdrawing LP will fail but anyone (not just sushi) can top up the rewarder in an emergency."
The developer suggests that the 10-hour timeline the white-hat hacker indicates is not cast in stone and that with anyone being able to refill the pool, no threat exists when the rewarder runs out of funds.
The SushiSwap dev also notes that allegations that a malicious actor can "drain" the rewarder by flooding it with LP were incorrect. He clarified that rewards allocated per liquidity token are reduced when more LP is added.
The claims follow what an anonymous white-hat hacker noted were two instances of vulnerabilities on the SushiSwap platform. Per the hacker, the decentralised finance (DeFi) protocol's emergencyWithdrawfunction relating to the MasterChef v2 and MiniChef v2 contracts puts users at risk because it doesn't work as intended.
The contracts in question hold rewards and LP token pools hosted on platforms such as Binance Smart Chain (BSC), Avalanche and Polygon.
SushiSwap has not released an official statement about the claims, but will certainly look to assure users of fund safety given the DeFi sector has recently witnessed several instances of attacks.
Tags:
转载:欢迎各位朋友分享到网络,但转载请说明文章出处“上海品茶网 - 夜上海最新论坛社区 - 上海千花论坛”。http://www.jz08.com.cn/news/7756.html
相关文章
Japan firm uses telecom AI to detect flaws in nuclear fusion reactor
SushiSwap developer says $1BN bug threats are 'incorrect'By subscribing, you agree to our Terms of Use and Policies You may unsubscribe at any time.Japan'...
阅读更多
7 of the Best Play
SushiSwap developer says $1BN bug threats are 'incorrect'In a recent report, DappRadar statedthat $1.3 billion was raised by play-to-earn and metaverse games...
阅读更多
Formerly shatterproof Cybertruck windows to be bulletproof: Elon Musk
SushiSwap developer says $1BN bug threats are 'incorrect'By subscribing, you agree to our Terms of Use and Policies You may unsubscribe at any time.Who can f...
阅读更多
热门文章
- BTC/USD crashed to $11,200 after OKEx pauses withdrawals
- China: World’s first quantum tech for vision health could help millions
- Malaysian Billionaire Steps Down From Business to Launch His Own Cryptocurrency
- Apple M3 chip: Apple reportedly spent $1 billion on developing M3 chips
- Bitcoin price slips 4% as BitMEX charged in the US
- Largest electric SOV debuts for offshore wind
最新文章
Google DeepMind invents 400,000 new materials
Webb and Hubble team up to capture galaxy cluster MACS0416
Huobi Token (HT) rises amidst increased trading volume
New algorithm may allow robots to move in crowded places
NVIDIA launches latest supercomputer AI chip – the H200
Gannet flying boat: This boat can fly over water literally