Clober流动性金库已被开采133 ETH，团队提供白帽赏金
Clober 是 Base 上的一个去中心化市场，已被开发 133 ETH。该团队向白帽子支付 20% 的费用，以重新获得资金。
Base 链上的去中心化交易所 Clober 的一个流动性金库最近遭受了攻击。黑客在单笔交易中成功提取了 133 个打包的 ETH。
🚨 紧急：安全漏洞警报 🚨
我们遗憾地通知我们的社区，Clober Liquidity Vault 已因安全漏洞而受到损害。
我们想让用户放心，Clober 协议本身不受影响，所有核心功能都将继续运行……
—克洛伯|完全上链 CLOB DEX (@CloberDEX) 2024 年 12 月 10 日
After the exploit, the funds were bridged back to the Ethereum main chain, which has a lot of paths for mixing or trading.
The protocol claimed no other features of the protocol were unaffected, and did not make any call for users to take any further extra steps.
Base is one of the relatively safer chains with few reported exploits. However, the growth of its DeFi sector has increased the frequency of attempts to steal valuable funds. As with other exploits, scammers may try to post phishing links attempting to drain wallets.
In addition to Base, Clober has built an Arbitrum version, which remains unaffected by the hack. Clober Core and the Mitosis testnet are also safe and will not be frozen or stopped.
The vault in question has been drained, and no other funds are at risk. The Clober V2 vault is still operational and is currently building up its value locked, based on Messari data. That vault contains a little over $17K.
Despite the call for a white hat fee, the hacker retained the funds. The team contacted the hacker directly through the Ethereum chain with a message to resolve the issue.
The project is working with Match Systems for a potential white hat solution, where the hacker receives a fee but returns most of the liquidity.
Hacker used burn function flaw to steal funds
To complete the exploit, the Clober hacker deposited just 2.87 ETH from Binance. After withdrawing the funds, they moved through the Across protocol bridge, ending up on two Ethereum addresses.
The two addresses (1 & 2) were created specifically for the bridge transaction to take the funds out of Base and onto the Ethereum mainnet.
According to PeckShield, the hack was possible due to issues with the burn function, which allowed the withdrawal call.
Clober offered fully on-chain order books
Clober is still an early-stage protocol with relatively low liquidity. Its liquidity vault is now practically empty. The protocol also onboarded the liquidity as late as December 9, based on DeFi Llama data. The hack happened a day later, suggesting the hacker may have been closely following the protocol.
The past few days saw similar exploits for relatively small sums. The recent events have exploited logic flaws in smart contracts, leading to relatively easy attempts to drain funds.
The recent exploit happened just days after Clober completed an audit of its smart contracts. It hired Kupia Security for the audit, a firm known for multiple bug bounties for high-profile projects.
Just days before that, Clober also advertised its liquidity vault approach, which aimed to smooth out DEX activity and swaps. At the time, it boasted that its $500K liquidity could generate volumes of $1.2M in 24 hours, serving to complete trades more efficiently. It was precisely this available liquidity that the exploiter carted away.
The Clober liquidity vault was first launched on Base just over a week ago, with the goal of replacing the usual Automated Market Makers (AMM) for DEX trades. Clober was also highly active with its promotion, specifically drawing attention to its targeted liquidity approach and the potential for high volumes.
Clober launched just after Base had achieved a new record in value locked, with its DeFi sector now carrying $3.86B in TVL. Clober aims to offer a model similar to Aerodrome, where targeted liquidity achieves much higher volumes, by targeting the most common price range for traders.
Land a High-Paying Web3 Job in 90 Days: The Ultimate Roadmap
相关文章
沃什暗示缩表 贝森特否认！美联储降息+缩表政策怎么进行？30万亿美债将受何影响？
随着沃什的提名，其曾提出过的管理美联储的创想都将被搬上台面，其中最核心的议题之一是制定新版《1951年协议》，重构美联储与财政部的关系。分析认为，这一举动可能会影响到30万亿美元的美债市场，改变美联储的资产负债表管理方式。
美国1月非农前瞻：或超预期，但对美股影响有限
TradingKey - 原定于 2 月 6 日发布的美国 1 月非农就业报告，受美国联邦政府部分停摆影响发布时间延后，最终确定至 2 月 11 日披露。近期美国制造业采购经理人指数（PMI）表现亮眼，市场对美国 1 月非农就业数据持温和改善的预期；而在美国经济展现出较强韧性、货币与财政政策协同宽松的背景下，该份非农就业数据或有望超出市场一致预期。
高市早苗的大选豪赌带来哪些影响？日元汇率绝地反击还是一蹶不振？
TradingKey - 2026年的开年大戏，比华尔街的预期来得更猛烈。距离2月8日的日本众议院大选仅剩最后几天，现任首相高市早苗（Sanae Takaichi）正在进行她政治生涯中最大的一次豪赌。
