已失效的收益協議遭到駭客攻擊，18.1 萬美元的加密貨幣消失了

駭客利用已失效的 Yield Protocol 智能合約從 Arbitrum 區塊鏈竊取了約 181,000 美元的加密資產。儘管 Yield Protocol 發出平倉和提取資金的警告，攻擊者還是利用池代幣餘額與總供應量之間的差異，透過閃貸資產提取額外的池代幣。對 Yield Protocol 的官方支持已於 2 月 2 日結束，被盜資金似乎不太可能恢復。

Hackers Exploit Defunct Yield Protocol, Siphoning $181,000 in Crypto

駭客利用已失效的收益協議竊取 181,000 美元的加密貨幣

February 24, 2024 - A brazen cyberattack has targeted the defunct decentralized finance (DeFi) lending protocol Yield Protocol, resulting in the theft of approximately $181,000 worth of cryptocurrency. The incident raises concerns about the security of dormant protocols and underscores the need for heightened vigilance in the digital asset space.

2024 年 2 月 24 日 - 一場無恥的網路攻擊針對已失效的去中心化金融 (DeFi) 借貸協議 Yield Protocol，導致價值約 181,000 美元的加密貨幣被盜。這起事件引發了人們對休眠協議安全性的擔憂，並強調了在數位資產領域提高警覺的必要性。

Background: Yield Protocol's Demise

背景：收益協議的消亡

In December 2023, Yield Protocol announced its closure amidst declining demand and regulatory pressures. The protocol had previously cautioned users to close their positions, withdraw funds, and repay outstanding loans. Despite these warnings, a significant amount of assets remained on the protocol's Arbitrum blockchain contracts.

2023 年 12 月，在需求下降和監管壓力下，Yield Protocol 宣布關閉。該協議先前曾警告用戶平倉、提取資金並償還未償還貸款。儘管有這些警告，仍有大量資產保留在該協議的 Arbitrum 區塊鏈合約上。

Exploiting the Discrepancy

利用差異

According to investigations led by blockchain security firms PeckShield and CertiK, the attacker exploited a discrepancy between the pool token balance and total supply. Utilizing flash-loaned assets, the hacker manipulated the system, withdrawing additional pool tokens and effectively draining the protocol's funds.

根據區塊鏈安全公司 PeckShield 和 CertiK 領導的調查，攻擊者利用了礦池代幣餘額與總供應之間的差異。駭客利用閃貸資產操縱系統，提取額外的池代幣並有效耗盡協議資金。

Unlikely Recovery

不太可能恢復

Official support for Yield Protocol ceased on February 2, 2024, and the likelihood of retrieving the stolen funds appears bleak. The protocol had previously demonstrated resilience by recovering from a flash loan attack in July 2023, but the current situation differs significantly.

對 Yield Protocol 的官方支持已於 2024 年 2 月 2 日停止，追回被盜資金的可能性似乎很渺茫。該協議先前曾在 2023 年 7 月的閃貸攻擊中恢復過來，展現了彈性，但目前的情況卻大不相同。

Previous History of Resurgence

復興的歷史

In March 2023, Yield Protocol was one of several DeFi protocols that incurred losses during an attack on Euler Finance. However, Yield Protocol subsequently recovered its lost funds through a complex process involving the deployment of new contracts and meticulous coordination.

2023 年 3 月，Yield Protocol 是在 Euler Finance 遭受攻擊時遭受損失的多個 DeFi 協定之一。然而，Yield Protocol 隨後透過部署新合約和細緻協調的複雜過程收回了損失的資金。

Industry Trends: Declining Losses Amidst Vigilance

產業趨勢：警戒中損失下降

Despite the Yield Protocol incident, blockchain security firm Immunefi reported a 23% decrease in losses due to hacking and scams in the first quarter of 2024 compared to the same period in 2023. This decline suggests that increased security measures and heightened awareness are starting to bear fruit.

儘管發生了Yield Protocol 事件，但區塊鏈安全公司Immunefi 報告稱，與2023 年同期相比，2024 年第一季因駭客和詐騙造成的損失下降了23%。提高意識已開始發揮作用水果。

Cautionary Lessons

警示教訓

The Yield Protocol hack serves as a stark reminder of the potential risks associated with dormant protocols. Users are urged to exercise extreme caution when dealing with any DeFi platform, especially those that have ceased operations. Withdrawing funds promptly and monitoring protocols closely can help mitigate potential vulnerabilities.

Yield Protocol 駭客事件清楚提醒人們，與休眠協定相關的潛在風險。我們敦促用戶在處理任何 DeFi 平台時要格外小心，尤其是那些已經停止運作的平台。及時提取資金並密切監控協議可以幫助減輕潛在的漏洞。

Industry Response

業界反應

In light of the Yield Protocol incident, security experts and regulators are likely to intensify their scrutiny of DeFi protocols. Increased oversight, stringent regulations, and enhanced collaboration between law enforcement and industry players will be essential to safeguard the digital asset ecosystem against future cyberattacks.

鑑於 Yield Protocol 事件，安全專家和監管機構可能會加強對 DeFi 協議的審查。加強監管、嚴格監管以及加強執法部門和行業參與者之間的合作對於保護數位資產生態系統免受未來網路攻擊至關重要。