DeFi 閃電貸：雙刃劍，流失數百萬美元，引發安全擔憂

DeFi 協議 Akropolis、Value DeFi Protocol 和 Origin Protocol 透過閃貸漏洞總共損失了 1,640 萬美元的 ETH 和 Dai。由於金庫提現定價漏洞，Value DeFi 遭受了 740 萬美元的損失，而 Origin Protocol 損失了 700 萬美元，Akropolis 損失了 200 萬美元。閃電貸允許用戶在同一區塊內無需抵押即可藉入資金，這使得攻擊者能夠利用協議的弱點，引發了關於其風險和收益的爭論。

DeFi Flash Loans: A Double-Edged Sword Draining Millions from Protocols

DeFi 閃電貸：一把雙刃劍，從協議中流失數百萬美元

In a relentless digital assault, hackers have siphoned a staggering $16.4 million in Ethereum (ETH) and Dai from three DeFi projects in just the past week, exploiting a sophisticated technique known as flash loans. These attacks have sent shockwaves through the DeFi community, raising questions about the security of these decentralized financial protocols.

在一場無情的數位攻擊中，駭客利用一種名為閃電貸的複雜技術，在過去一周從三個 DeFi 項目中竊取了價值 1640 萬美元的以太坊 (ETH) 和 Dai。這些攻擊給 DeFi 社群帶來了衝擊，引發了人們對這些去中心化金融協議的安全性的質疑。

Value DeFi: A $7.4 Million Heist

價值 DeFi：740 萬美元的搶劫

On Value DeFi, an attacker masterfully orchestrated a series of flash-loaned ETH swaps for DAI and USDT to infiltrate the protocol's multi-stablecoin vault. Leveraging the vault's withdrawal mechanism, they manipulated stablecoin prices to extract $7.4 million. However, the hacker later returned $2 million, leaving the protocol with a net loss of $5.4 million.

在 Value DeFi 上，攻擊者巧妙地策劃了一系列以閃貸方式交換 DAI 和 USDT 的 ETH，以滲透到該協議的多穩定幣金庫。他們利用金庫的提現機制，操縱穩定幣價格，套取 740 萬美元。然而，駭客後來返還了 200 萬美元，導致協議淨損失 540 萬美元。

In response, Value DeFi has suspended its vaults, prudently ensuring the safety of depositors' funds. A meticulous post-mortem investigation is underway to determine the exact compensation amounts for affected users.

對此，Value DeFi 已暫停金庫，審慎確保儲戶資金安全。正在進行細緻的事後調查，以確定受影響用戶的確切賠償金額。

Origin Protocol: $7 Million Compromised

Origin 協議：損失 700 萬美元

Origin Protocol fell victim to a similar flash loan attack, resulting in a $7 million loss. The hacker repeated the rinse-and-wash pattern on liquidity platforms like Uniswap, exploiting the protocol's vulnerabilities. Origin has disabled vault deposits and has issued a stern warning against purchasing its OUSD token, emphasizing that its current price does not reflect its underlying assets. The team is exploring options to compensate users if the lost funds cannot be recovered.

Origin Protocol 成為類似閃貸攻擊的受害者，導致 700 萬美元損失。駭客利用協議的漏洞，在 Uniswap 等流動性平台上重複了「沖洗和清洗」模式。 Origin 已禁止金庫存款，並對購買其 OUSD 代幣發出嚴厲警告，強調其當前價格並未反映其基礎資產。如果無法追回損失的資金，該團隊正在探索對用戶進行補償的方案。

Akropolis: $2 Million Drained

Akropolis：耗盡 200 萬美元

Akropolis suffered a $2 million loss due to the exploitation of pooltokens minted without adequate asset backing. To enhance security, Akropolis has implemented additional checks for deposit tokens and re-entrancy guards for deposits and withdrawals. The team plans to conduct thorough contract testing and gradually reopen staking pools next week.

由於在沒有足夠資產支持的情況下鑄造的礦池代幣被利用，Akropolis 遭受了 200 萬美元的損失。為了增強安全性，Akropolis 對存款代幣實施了額外的檢查，並對存款和提款進行了重入防護。該團隊計劃在下週進行徹底的合約測試並逐步重新開放質押池。

The Flash Loan Dilemma: Boon or Bane?

閃電貸困境：是福還是禍？

Flash loans are a unique feature of DeFi protocols, allowing users to borrow funds without collateral, provided the loan is repaid within the same block. This has enabled speculators to uncover protocol weaknesses without the need for significant capital. While some argue that flash loans expose vulnerabilities sooner, others condemn them as dangerous tools that jeopardize user funds.

閃電貸是 DeFi 協議的獨特功能，允許用戶在沒有抵押的情況下借入資金，前提是貸款在同一個區塊內償還。這使得投機者無需大量資金即可發現協議的弱點。雖然有些人認為閃電貸會更快地暴露漏洞，但有些人則譴責它們是危及用戶資金的危險工具。

The ongoing rise in DeFi attacks, culminating in $346 million stolen to date, has raised concerns about the security of these platforms. DeFi protocols are collaborating with security firms to recover lost funds and strengthen their defenses.

DeFi 攻擊持續增加，迄今已導致 3.46 億美元被盜，引發了人們對這些平台安全性的擔憂。 DeFi 協議正在與保全公司合作，以追回失去的資金並加強防禦。

As the DeFi ecosystem continues to evolve, the delicate balance between innovation and security will remain a paramount concern. The recent flash loan attacks serve as a stark reminder of the risks associated with this rapidly expanding domain.

隨著 DeFi 生態系統的不斷發展，創新與安全之間的微妙平衡仍將是最重要的議題。最近的閃電貸攻擊清楚地提醒我們，這個快速擴張的領域有風險。