Terra 區塊鏈在網路暫時停止以阻止漏洞後恢復正常運行

在網路暫時停止以阻止最近的漏洞後，Terra 區塊鏈已恢復正常運作。今天早些時候，Terra 報告了一起安全漏洞，導致包括 USDC 和 Astroport 代幣在內的各種資產被盜。

Terra blockchain resumes operations after halting to patch recent exploit

Terra 區塊鏈在停止修補最近的漏洞後恢復運行

Earlier today, Terra reported a security breach that led to the theft of various assets, including USDC and Astroport tokens.

今天早些時候，Terra 報告了一起安全漏洞，導致包括 USDC 和 Astroport 代幣在內的各種資產被盜。

The attack

攻擊

The exploit targeted a vulnerability in IBC-hooks, a third-party add-on for Inter-Blockchain Communication (IBC) that supports cross-chain contract interactions and token transfers. Although Terra patched the issue in April, the fix was unintentionally reversed in a June update.

該漏洞針對的是 IBC-hooks 中的漏洞，IBC-hooks 是支援跨鏈合約互動和代幣傳輸的區塊鏈間通訊 (IBC) 第三方插件。儘管 Terra 在 4 月修復了該問題，但該修復在 6 月的更新中無意中被撤銷。

Cyvers Alert, a Web3 security firm, explained that the attacker exploited a reentrancy vulnerability in the timeout callback of IBC hooks.

Web3安全公司Cyvers Alert解釋稱，攻擊者利用了IBC鉤子超時回調中的重入漏洞。

The firm revealed that the attacker used this vulnerability to steal assets worth approximately $5 million. This includes 60 million ASTRO valued at around $1 million, 3.5 million USDC, 500,000 USDT, and 2.7 BTC, roughly $178,000 at current rates.

該公司透露，攻擊者利用此漏洞竊取了價值約 500 萬美元的資產。其中包括價值約 100 萬美元的 6,000 萬個 ASTRO、350 萬個 USDC、50 萬個 USDT 和 2.7 個 BTC，以當前匯率計算約為 178,000 美元。

In response, the network paused block production at block height 11,430,400 to implement an emergency patch.

作為回應，網路在區塊高度 11,430,400 處暫停了區塊生產，以實施緊急修補程式。

The vulnerability has been fixed as of press time, and the network Validators are updating their nodes to prevent similar exploits. Terra added:

截至發稿時，漏洞已修復，網路驗證器正在更新其節點以防止類似的攻擊。泰拉補充道：

“Validators holding over 67% of the voting power on Terra have upgraded their nodes to prevent the exploit from recurring. More validators are expected to upgrade soon.”

「在 Terra 上擁有超過 67% 投票權的驗證者已經升級了他們的節點，以防止漏洞再次發生。預計很快會有更多驗證器升級。

Astroport token declines

Astroport 代幣下跌

Despite Terra’s recovery efforts, Astroport’s ASTRO token has plunged by 62% in the past 24 hours, trading at $0.01775, according to CryptoSlate’s data.

根據 CryptoSlate 的數據，儘管 Terra 做出了恢復努力，但 Astroport 的 ASTRO 代幣在過去 24 小時內暴跌 62%，交易價格為 0.01775 美元。

The Cosmos-based liquidity protocol explained that the IBC vulnerability allowed the attacker to mint several tokens on the Terra chain, negatively impacting the asset’s price. It stated:

基於 Cosmos 的流動性協議解釋說，IBC 漏洞允許攻擊者在 Terra 鏈上鑄造多個代幣，從而對資產價格產生負面影響。它指出：

“The Astroport contributors are working with the other chains and Cosmos builders to determine what measures can be taken. We will keep you updated as we learn more.”

「Astroport 貢獻者正在與其他連鎖店和 Cosmos 建造者合作，以確定可以採取哪些措施。當我們了解更多信息時，我們會及時向您通報最新情況。

Meanwhile, security experts have also emphasized that Astroport wasn’t exploited, and its token “became collateral damage because it’s the only Terra token that has meaningful liquidity for stealing.”

與此同時，安全專家也強調，Astroport 沒有被利用，它的代幣“成為了附帶損害，因為它是唯一一個具有有意義的盜竊流動性的 Terra 代幣。”

Mentioned in this article

這篇文章中提到

Oluwapelumi Adejumo

奧魯瓦佩魯米·阿德朱莫

Oluwapelumi values Bitcoin's potential. He imparts insights on a range of topics like DeFi, hacks, mining and culture, underlining transformative power.

Oluwapelumi 重視比特幣的潛力。他就 DeFi、駭客、挖礦和文化等一系列主題發表了見解，強調了改變的力量。

Liam 'Akiba' Wright

利亞姆「秋葉」賴特

Also known as "Akiba," Liam is a reporter, editor and podcast producer at CryptoSlate. He believes that decentralized technology has the potential to make widespread positive change.

Liam 也被稱為“Akiba”，是 CryptoSlate 的記者、編輯和播客製作人。他相信去中心化科技有潛力帶來廣泛的正面改變。