Beosin: Análise das causas da vulnerabilidade do evento da cadeia Terra

Odaily Daily Planet News According to Beosin Alert monitoring and early warning, the Terra chain is temporarily suspended due to emergency upgrade. It seems that someone is using the IBC vulnerability to mint a long list of tokens on Terra, including ASTRO. Beosin's security team analysis revealed that after the attacker instantiated the contract on Terra, they used the reentry vulnerability of timeout retraction in ibc-hooks to transfer approximately 60 million ASTRO, 3.5 million USDC, 500 thousand USDT and 2.7 BTC. Esta vulnerabilidade foi divulgada em abril deste ano, é uma vulnerabilidade na biblioteca base do cosmos, mas o Terra não a corrigiu.