已失效的收益协议遭到黑客攻击，18.1 万美元的加密货币消失了

黑客利用已失效的 Yield Protocol 智能合约从 Arbitrum 区块链窃取了约 181,000 美元的加密资产。尽管 Yield Protocol 发出平仓和提取资金的警告，攻击者还是利用池代币余额与总供应量之间的差异，通过闪贷资产提取额外的池代币。对 Yield Protocol 的官方支持已于 2 月 2 日结束，被盗资金似乎不太可能恢复。

Hackers Exploit Defunct Yield Protocol, Siphoning $181,000 in Crypto

黑客利用已失效的收益协议窃取 181,000 美元的加密货币

February 24, 2024 - A brazen cyberattack has targeted the defunct decentralized finance (DeFi) lending protocol Yield Protocol, resulting in the theft of approximately $181,000 worth of cryptocurrency. The incident raises concerns about the security of dormant protocols and underscores the need for heightened vigilance in the digital asset space.

2024 年 2 月 24 日 - 一场无耻的网络攻击针对已失效的去中心化金融 (DeFi) 借贷协议 Yield Protocol，导致价值约 181,000 美元的加密货币被盗。该事件引发了人们对休眠协议安全性的担忧，并强调了在数字资产领域提高警惕的必要性。

Background: Yield Protocol's Demise

背景：收益协议的消亡

In December 2023, Yield Protocol announced its closure amidst declining demand and regulatory pressures. The protocol had previously cautioned users to close their positions, withdraw funds, and repay outstanding loans. Despite these warnings, a significant amount of assets remained on the protocol's Arbitrum blockchain contracts.

2023 年 12 月，在需求下降和监管压力下，Yield Protocol 宣布关闭。该协议此前曾警告用户平仓、提取资金并偿还未偿还贷款。尽管有这些警告，仍有大量资产保留在该协议的 Arbitrum 区块链合约上。

Exploiting the Discrepancy

利用差异

According to investigations led by blockchain security firms PeckShield and CertiK, the attacker exploited a discrepancy between the pool token balance and total supply. Utilizing flash-loaned assets, the hacker manipulated the system, withdrawing additional pool tokens and effectively draining the protocol's funds.

根据区块链安全公司 PeckShield 和 CertiK 领导的调查，攻击者利用了矿池代币余额与总供应量之间的差异。黑客利用闪贷资产操纵系统，提取额外的池代币并有效耗尽协议资金。

Unlikely Recovery

不太可能恢复

Official support for Yield Protocol ceased on February 2, 2024, and the likelihood of retrieving the stolen funds appears bleak. The protocol had previously demonstrated resilience by recovering from a flash loan attack in July 2023, but the current situation differs significantly.

对 Yield Protocol 的官方支持已于 2024 年 2 月 2 日停止，追回被盗资金的可能性似乎很渺茫。该协议此前曾在 2023 年 7 月的闪贷攻击中恢复过来，展现了弹性，但目前的情况却大不相同。

Previous History of Resurgence

复兴的历史

In March 2023, Yield Protocol was one of several DeFi protocols that incurred losses during an attack on Euler Finance. However, Yield Protocol subsequently recovered its lost funds through a complex process involving the deployment of new contracts and meticulous coordination.

2023 年 3 月，Yield Protocol 是在 Euler Finance 遭受攻击时遭受损失的多个 DeFi 协议之一。然而，Yield Protocol 随后通过部署新合约和细致协调的复杂过程收回了损失的资金。

Industry Trends: Declining Losses Amidst Vigilance

行业趋势：警惕中损失下降

Despite the Yield Protocol incident, blockchain security firm Immunefi reported a 23% decrease in losses due to hacking and scams in the first quarter of 2024 compared to the same period in 2023. This decline suggests that increased security measures and heightened awareness are starting to bear fruit.

尽管发生了 Yield Protocol 事件，但区块链安全公司 Immunefi 报告称，与 2023 年同期相比，2024 年第一季度因黑客和诈骗造成的损失下降了 23%。这一下降表明，加强安全措施和提高意识已开始发挥作用水果。

Cautionary Lessons

警示教训

The Yield Protocol hack serves as a stark reminder of the potential risks associated with dormant protocols. Users are urged to exercise extreme caution when dealing with any DeFi platform, especially those that have ceased operations. Withdrawing funds promptly and monitoring protocols closely can help mitigate potential vulnerabilities.

Yield Protocol 黑客事件清楚地提醒人们，与休眠协议相关的潜在风险。我们敦促用户在处理任何 DeFi 平台时要格外小心，尤其是那些已经停止运营的平台。及时提取资金并密切监控协议可以帮助减轻潜在的漏洞。

Industry Response

业界反应

In light of the Yield Protocol incident, security experts and regulators are likely to intensify their scrutiny of DeFi protocols. Increased oversight, stringent regulations, and enhanced collaboration between law enforcement and industry players will be essential to safeguard the digital asset ecosystem against future cyberattacks.

鉴于 Yield Protocol 事件，安全专家和监管机构可能会加强对 DeFi 协议的审查。加强监管、严格监管以及加强执法部门和行业参与者之间的合作对于保护数字资产生态系统免受未来网络攻击至关重要。