忽略报告的安全漏洞后虚拟协议 (VIRTUAL) 崩溃

虚拟协议（VIRTUAL）是本周在人工智能（AI）加密货币热潮中表现最好的协议，但现在却崩溃了。当区块链安全研究人员揭露了 Virtuals 团队忽略的安全漏洞时，突然的看跌逆转发生了。

Top AI crypto this week, Virtuals Protocol (VIRTUAL) is crashing after a blockchain security researcher highlighted a reported security vulnerability that was ignored by the Virtuals team.

本周，顶级人工智能加密货币 Virtuals Protocol (VIRTUAL) 崩溃，此前一位区块链安全研究人员强调了一个已报告的安全漏洞，但该漏洞被 Virtuals 团队忽略了。

As precisely explained, jinu (@lj1nu) took to X between January 2 and 3 to publicly report a security vulnerability he found during a “quick look” at the Virtuals Protocol code. However, the public report was only prompted after jinu’s private reporting via the team’s Discord server went unnoticed.

正如所解释的那样，jinu (@lj1nu) 在 1 月 2 日至 3 日期间在 X 上公开报告了他在“快速查看”虚拟协议代码时发现的一个安全漏洞。然而，在 jinu 通过团队的 Discord 服务器进行的私人报告未被注意到之后，公开报告才被提示。

“They [Virtuals] are said to have been audited, but when I contacted them, the team said they weren’t running a bug bounty. And they closed the discord channel I created to report the vulnerability.”

“据说他们 [Virtuals] 已经过审核，但当我联系他们时，团队表示他们没有进行错误赏金。他们还关闭了我为报告该漏洞而创建的不和谐频道。”

This is not the ideal or standard way to handle a reported threat, especially in open-source software, sparking concerns and raising red flags. “I’m surprised that a project as big and hot as @virtuals_io doesn’t care about security,” concluded the researcher.

这不是处理所报告的威胁的理想或标准方法，尤其是在开源软件中，会引发担忧并发出危险信号。 “我很惊讶像@virtuals_io 这样大而热门的项目竟然不关心安全性，”研究人员总结道。

Top AI crypto Virtuals Protocol’s security vulnerability explained

顶级人工智能加密虚拟协议的安全漏洞解释

Interestingly, another security expert, 33Audits (@solidityauditor) revealed that he and “a few others” tried to report the same issue earlier, only to get “booted” from both the Discord and Telegram official servers.

有趣的是，另一位安全专家 33Audits (@solidityauditor) 透露，他和“其他一些人”早些时候试图报告同样的问题，结果却被 Discord 和 Telegram 官方服务器“启动”。

tried to report this along with a few others and they booted me from the discord and stopped answering on tg. they don’t give af

我试图和其他几个人一起报告此事，但他们把我从不和谐中踢了出来，并停止在 tg 上回答。他们不给AF

Yet, in a follow-up comment, jinu highlighted that the Virtuals team swiftly patched the reported security vulnerability following his post’s success. The expert shared the now-fixed source code and the new contract address, which is now supposedly secured. “They patched it very quickly,” he added.

然而，jinu 在后续评论中强调，在他的帖子成功后，Virtuals 团队迅速修复了报告的安全漏洞。该专家分享了现已修复的源代码和新的合约地址，据称该地址现在已受到保护。 “他们很快就修补了它，”他补充道。

In essence, the vulnerability allowed attackers to predict and create a Uniswap V2 token pair before Virtuals did, which could prevent the protocol from properly launching new tokens.

从本质上讲，该漏洞允许攻击者在 Virtuals 之前预测并创建 Uniswap V2 代币对，这可能会阻止该协议正确启动新代币。

If someone else creates the pair first, Virtuals can’t proceed with the launch after reaching a certain price-threshold in the platform. The token creation follows a predictable method, which attackers can use to act first.

如果其他人先创建了该货币对，则 Virtuals 在达到平台中的特定价格阈值后将无法继续启动。令牌创建遵循可预测的方法，攻击者可以使用该方法首先采取行动。

Virtuals Protocol (VIRTUAL) price crash

虚拟协议（VIRTUAL）价格暴跌

At the time of writing, VIRTUAL is trading at $4.29, crashing 7.19% in the last 24 hours. The token traded as low as $4.10 while the issue was present, now recovering slightly after the apparent fix.

截至撰写本文时，VIRTUAL 的交易价格为 4.29 美元，在过去 24 小时内暴跌 7.19%。问题出现时，该代币的交易价格低至 4.10 美元，目前在明显修复后略有恢复。

As reported by Finbold Yesterday, the AI crypto scene is seeing a massive surge, surpassing the $10 billion total market cap. In the last seven days, VIRTUAL is up 30%, but investors and traders are now facing fear, uncertainty, and doubt (FUD), following the recent events.

据 Finbold 昨天报道，人工智能加密货币领域正在大幅增长，总市值超过 100 亿美元。在过去 7 天里，VIRTUAL 上涨了 30%，但在最近发生的事件之后，投资者和交易者现在面临着恐惧、不确定性和怀疑 (FUD)。

This issue could have impacted users by delaying token releases, investors by risking token value, and developers by damaging trust. While it is already fixed, the team’s behavior could have damaged the market’s trust, which is directly reflected in its price performance.

此问题可能会因延迟代币发行而影响用户、因代币价值面临风险而影响投资者、以及因破坏信任而影响开发者。虽然问题已经解决，但团队的行为可能会损害市场的信任，这直接反映在其价格表现上。

Featured image from Shutterstock

来自 Shutterstock 的精选图片