分散的貸款平台Abracadabra。金額遭受攻擊，耗盡了價值1300萬美元的加密貨幣

區塊鏈安全公司Peckshield宣稱涉及分散交易所GMX和Abracadabra的合同受到了損害，導致盜竊6,260 ETH

Decentralized lending platform Abracadabra.Finance suffered an exploit that saw an attacker drain 6,260 ETH, worth around $12.98 million at the time of writing, from pools tied to GMX liquidity tokens.

權力下放的貸款平台Abracadabra.Finance遭受了攻擊，這使攻擊者排水6,260 ETH，在撰寫本文時價值約為1,298萬美元，從與GMX流動性令牌相關的池。

Blockchain security firm PeckShield noted that contracts linked to decentralized exchange GMX and Abracadabra were compromised.

區塊鏈安全公司Peckshield指出，與分散的交易所GMX和Abracadabra相關的合同受到妥協。

The exploit focused on so-called “cauldrons,” which are isolated lending markets in Abracadabra where users can borrow against crypto collateral. These particular cauldrons relied on GM tokens, which represent liquidity positions in GMX, a decentralized exchange platform.

專注於所謂的“大鍋”的利用是在阿布拉卡達布拉（Abracadabra）孤立的貸款市場，用戶可以藉用加密抵押品。這些特殊的大鍋依賴於轉基因令牌，後者代表了一個分散的交換平台GMX中的流動性位置。

.@GMX_IO @MIM_Spell related contracts are being exploited and about 6,260 ETH (worth ~$13M) has been drained from a few Abracadabra cauldrons.

。

The exploit focused on GM tokens, which are used to create liquidity positions in GMX, a decentralized exchange platform.

專注於GM代幣的利用，用於在分散的交換平台GMX中創建流動性位置。

— PeckShield Inc. (@PeckShieldUSA) October 25, 2023

- Peckshield Inc.（@peckshieldusa）2023年10月25日

GMX distanced itself from the incident. In a post on X, an account associated with the exchange said that GMX’s contracts themselves were unaffected. The team later said the breach was “solely related to the Abracadabra/Spell cauldrons,” which used GM tokens as collateral but did not involve GMX’s core infrastructure.

GMX與事件保持距離。在X上的帖子中，與交易所相關的帳戶說，GMX的合同本身不受影響。該團隊後來表示，違規行為“僅與Abracadabra/Spell大鍋有關”，後者使用GM令牌作為抵押品，但不涉及GMX的核心基礎架構。

In a statement on X, Abracadabra confirmed the exploit and said core contributors and engineers were investigating the incident to its “fully audited” cauldron. The protocol noted that gmCauldrons had been audited by Guardian Audits — the same firm that audited GMX contracts — and were part of a broader security infrastructure involving monitoring and response tools.

Abracadabra在有關X的一份聲明中證實了該事件，並說核心貢獻者和工程師正在調查其“經過全面審核”大鍋的事件。該協議指出，GMCAULDRON已由Guardian審計（審核GMX合同的公司）審核，並且是涉及監視和響應工具的更廣泛安全基礎架構的一部分。

The protocol offered the attacker a 20% bug bounty and invited them to negotiate via email or an on-chain message.

該協議向攻擊者提供了20％的漏洞賞金，並邀請他們通過電子郵件或鏈郵件進行談判。

Abracadabra is working with Guardian and GMX as well as other security partners in assessing the extent of the damage and how the attack was executed. A full post-mortem will follow once the investigation concludes, and no user collateral was affected, it said.

Abracadabra正在與Guardian和GMX以及其他安全合作夥伴合作，以評估損害的程度以及攻擊的執行方式。它說，一旦調查得出結論，將遵循完整的驗屍，並且沒有影響用戶抵押品。

Last year Abracadabra.Finance suffered an exploit that saw attackers gain $6.49 million in crypto and cause the protocol’s Magic Internet Money (MIM) stablecoin to lose its peg to the U.S. dollar.

去年，Abracadabra。金錢遭受了攻擊，使攻擊者獲得了649萬美元的加密貨幣，並導致協議的魔術互聯網貨幣（MIM）Stablecoin損失了其固定資金的釘子。