![]() |
|
![]() |
|
![]() |
|
![]() |
|
![]() |
|
![]() |
|
![]() |
|
![]() |
|
![]() |
|
![]() |
|
![]() |
|
![]() |
|
![]() |
|
![]() |
|
![]() |
|
Pectra于3月5日上午7:29在其最终的测试网络上推出了
The recent Pectra upgrade of the Sepolia testnet ran into errors, which was made worse after an attacker used an “edge case” to cause the mining of empty blocks, according to a post by Ethereum developer Marius van der Wijden.
根据以太坊开发人员Marius van der Wijden的帖子,最近攻击者使用“边缘案件”引起空块的采矿后,塞波利亚测试网的最近升级遇到了错误,这使这变得更糟。
Pectra rolled out on its final testnet, Sepolia, at 7:29 am on March 5, but the team immediately started seeing error messages on their geth node and empty blocks being mined.
Pectra于3月5日上午7:29在其最终的测试网络塞波利亚(Sepolia)上推出,但团队立即开始在其Geth Node上看到错误消息,并开采了空块。
The error was because the deposit contract triggered the wrong type of event — a transfer event instead of a deposit, according to van der Wijden. A fix was rolled out, but they missed one edge case, and an unknown user exploited it by sending a 0-token transfer to the deposit address, which triggered the error again.
该错误是因为存款合同触发了错误类型的事件 - 转移事件而不是存款。解决了一个修复程序,但他们错过了一个边缘案例,一个未知用户通过将0 token转移发送到存款地址来利用它,这再次触发了错误。
“After a few minutes we saw a lot of empty blocks again, so we looked again into the transaction pools and found another offending transaction that triggered the same edge cases,” he said.
他说:“几分钟后,我们再次看到了很多空块,所以我们再次查看了交易池,发现了另一个有害的交易触发了相同的边缘案件。”
“First we thought that someone from the trusted validators has made a mistake, but we quickly realized that this transaction originated from a new account recently funded by the faucet.”
“首先,我们认为来自受信任验证者的人犯了一个错误,但是我们很快意识到,这项交易起源于最近由水龙头资助的新帐户。”
The ERC-20 standard does not forbid a zero token transfer; this allows anyone, even if they don’t own any tokens, to transfer to another address, which the unknown user realized, van der Wijden said.
ERC-20标准不禁止代币传输零; Van der Wijden说,这使任何人都没有任何令牌,即使他们没有任何代币,也可以将其转移到未知用户意识到的地址。
“The only way to stop the attack would be to filter out all transactions that interact with the deposit contract. So we made the following private fix, which we deployed to a few of the DevOps nodes.”
“停止攻击的唯一方法是滤除与存款合同相互作用的所有交易。因此,我们进行了以下私人修复程序,并将其部署到了一些DevOps节点。”
“We suspected that the attacker was reading some of our chats, so we decided not to publicize the fix, but only update a few nodes that we controlled in order to get more full blocks on the network,” he added.
他补充说:“我们怀疑攻击者正在阅读我们的一些聊天,因此我们决定不宣传修复程序,但仅更新一些我们控制的节点,以便在网络上获得更多的完整块。”
By 2 pm, all the nodes had been updated with the fix, and the unknown user transaction was mined successfully.
到下午2点,所有节点都通过修复程序进行了更新,未知的用户交易已成功开采。
They never lost finalization during the incident, and the issue was isolated to Sepolia because they were using a token-gated deposit contract instead of the normal mainnet deposit contract.
他们在事件期间从未失去最终确定,并且该问题被隔离到Sepolia,因为他们使用了令牌门控的存款合同,而不是正常的Mainnet存款合同。
Previously, the developers tested the Pectra upgrade on the Holesky testnet on Feb. 26, which also encountered issues.
此前,开发人员于2月26日在Holesky Testnet上测试了Pectra升级,这也遇到了问题。
As a result, the developers have decided to postpone the Pectra upgrade until more tests can be done.
结果,开发人员已决定将Pectra升级推迟,直到可以进行更多测试为止。
See also: Ether sentiment hits yearly low but that could be a good thing: Santiment
另请参阅:以太情绪每年都在低调,但这可能是一件好事:令人愉悦
The Pectra fork follows the network’s Dencun upgrade, which slashed transaction fees for layer-2 networks and improved the economics of Ethereum rollups. The Dencun hard fork rolled out on March 13, 2024.
Pectra叉遵循该网络的Dencun升级,该升级削减了第2层网络的交易费用,并改善了以太坊汇总的经济性。 Dencun Hard Fork于2024年3月13日推出。
Recently, the Ethereum Foundation announced a new leadership structure with two co-directors of the foundation, Hsiao-Wei Wang and Tomasz Stańczak, taking the helm.
最近,以太坊基金会宣布了一个新的领导结构,其中两个基金会的联合指导者Hsiao-Wei Wang和TomaszStańczak掌管。
免责声明:info@kdj.com
所提供的信息并非交易建议。根据本文提供的信息进行的任何投资,kdj.com不承担任何责任。加密货币具有高波动性,强烈建议您深入研究后,谨慎投资!
如您认为本网站上使用的内容侵犯了您的版权,请立即联系我们(info@kdj.com),我们将及时删除。
-
-
-
- Skyren Dao代币激增活动:最大化您的投资
- 2025-03-10 23:05:47
- Rexas Finance社区正处于一个令人兴奋的机会的门槛,由Skyren Dao提供
-
- 尽管特朗普总统的行政命令,比特币价格下跌了
- 2025-03-10 23:05:47
- 尽管特朗普总统的行政命令建立战略性比特币储备金,但比特币价格仍在下降。
-
-
-
- Web3不是为人类设计的;它是为机器建造的
- 2025-03-10 23:05:47
- 智能合约,分散网络和可验证的计算将保留。但是现在,他们正在针对AI驱动的执行,协调进行优化
-
-
- Rexas Finance(RXS)将立即使Doge感到羞耻。好的
- 2025-03-10 22:50:47
- Dogecoin在1月和2月不断暴跌,标志着2025年的开端。