Terra 区块链在 ASTRO、USDC、USDT 和 BTC 中价值 400 万美元

周三，Terra 开发者因重入攻击而暂时停止网络运营，导致超过 400 万美元的各种代币被盗

Terra blockchain was exploited for around $60 million in various tokens, including ASTRO, USDC, USDT, and BTC, on July 31.

7 月 31 日，Terra 区块链被各种代币利用，价值约 6000 万美元，其中包括 ASTRO、USDC、USDT 和 BTC。

According to blockchain security firm Beosin, the attacker exploited a reentrancy vulnerability in the timeout callback of ibc-hooks, a vulnerability that had been disclosed in April. This type of bug allows exploiters to trick a smart contract by making repeated calls to a protocol to steal assets, tricking the smart contract into authorizing the smart contract address to interact with a user’s wallet address.

据区块链安全公司Beosin称，攻击者利用了ibc-hooks超时回调中的重入漏洞，该漏洞已于4月份被披露。此类漏洞允许攻击者通过重复调用协议来欺骗智能合约来窃取资产，欺骗智能合约授权智能合约地址与用户的钱包地址进行交互。

Beosin reported that the Terra exploit led to the theft of $3.5 million in USDC stablecoin, $500,000 in USDT stablecoin, 2.7 bitcoins (BTC), and more than 60 million of Astroport’s ASTRO tokens.

Beosin 报告称，Terra 漏洞导致价值 350 万美元的 USDC 稳定币、50 万美元的 USDT 稳定币、2.7 个比特币 (BTC) 以及超过 6000 万个 Astroport 的 ASTRO 代币被盗。

Security firm Cyvers also reported on the incident, stating that 60 million ASTRO tokens were stolen in the exploit, which also affected other tokens, including 3.5 million USDC, 2.7 BTC, and 500,000 USDT.

安全公司 Cyvers 也报告了该事件，称 6000 万个 ASTRO 代币在该漏洞中被盗，这也影响了其他代币，包括 350 万个 USDC、2.7 个 BTC 和 50 万个 USDT。

The Astroport team confirmed the incident, attributing it to an IBC vulnerability and adding that the exploit appeared to have been used to mint several tokens on the Terra chain, including ASTRO.

Astroport 团队证实了这一事件，将其归因于 IBC 漏洞，并补充说该漏洞似乎已被用来在 Terra 链上铸造多个代币，包括 ASTRO。

With the blockchain halted, no further tokens could be minted, limiting the extent of the damage.

随着区块链的停止，无法再铸造更多的代币，从而限制了损害的程度。

Terra blockchain announced the temporary halt of operations at block height 11430400 and informed users of the downtime via a post on X.

Terra 区块链宣布暂时停止区块高度 11430400 的操作，并通过 X 上的帖子通知用户停机时间。

The network was paused to allow validators to upgrade their nodes and apply an emergency patch that fixed the vulnerability. The fix was completed by 04:19 UTC.

网络被暂停，以允许验证者升级其节点并应用修复漏洞的紧急补丁。修复已于 UTC 时间 04:19 完成。

Over 67% of the voting power on Terra supported this upgrade, ensuring the network’s stability and security.

Terra 超过 67% 的投票权支持此次升级，保证了网络的稳定性和安全性。

The network was set to resume operations at block height 114304050, with validators expected to quickly achieve the necessary quorum for the chain to restart.

网络原定在区块高度 114304050 处恢复运行，验证者预计将快速达到链重启所需的法定人数。

Once operational, the network was expected to quickly process any pending transactions and return to normal functioning.

一旦投入运行，网络预计将快速处理任何待处理的交易并恢复正常运行。

In the aftermath of the Terra exploit, ASTRO, the native token of the Cosmos liquidity protocol Astroport, experienced a significant decline.

在 Terra 漏洞利用之后，Cosmos 流动性协议 Astroport 的原生代币 ASTRO 经历了大幅下跌。

CoinGecko data indicated that ASTRO fell by 56%. Meanwhile, Terra’s luna classic (LUNC) tokens saw a 3.4% decrease in the past 24 hours.

CoinGecko数据显示ASTRO下跌了56%。与此同时，Terra 的 luna classic (LUNC) 代币在过去 24 小时内下跌了 3.4%。

The exploit caused ASTRO’s price to drop sharply from $0.046 to a low of $0.013, although it later recovered to above $0.02 as efforts to address the vulnerability continued.

该漏洞导致 ASTRO 的价格从 0.046 美元大幅下跌至 0.013 美元的低点，尽管随后随着解决该漏洞的努力的继续，其价格恢复到 0.02 美元以上。