Cos(余弦)😶🌫️
@evilcos
Founder of @SlowMist_Team // 分身一号/捉虫大师/救火运动员 // 🕖灾备频道
加入 November 2008
1.5K 正在關注 124.3K 粉絲
估计 @AFX_XYZ 7 个热验证器（hot-validator）中的 5 个被搞了，私钥泄露，导致攻击者获得足够的合法签名权，卷走桥里的资金，目前资金都在这：
12,467 枚 ETH。
顯示更多
🚨 $24.15M USDC drained from an Arbitrum bridge — — 5 compromised keys
5 hot-validator signatures carried 7,142/10,000 power (>2/3 quorum). The contract did exactly what it was told — the keys were
the weak point.
Two-phase attack, both traced on-chain:
1⃣ Propose (carries the 5 sigs + full 7-validator set, powers sum to 10,000)
2⃣ 200s dispute window → Execute (releases 24.15M USDC, bridged out via CCTP)
Sigs are in the propose tx, not the withdrawal tx 👇
Propose:
Execute:
Stolen funds: 0x627654B2782bfC57580ecD11d40869b350B6ebAC now on ETH chain. 12,467.43703738 ETH
顯示更多
