Blockchain Security Dedaub has published a post-mort report on the decentralized Hack replacement of CETUS, identifying the main reason for the attack as the employ of liquidity parameters used by the manufacturer of the CETUS market (AMM) market, which was not detected by checking the “overflow” code.
According to reportHackers used the defect on the most vital bit control (MSB), enabling them to manipulate the values of liquidity parameters according to the rows of size and establish relatively huge positions using the keys. Dedaub safety researchers wrote:
“This allowed them to add huge liquidity positions using only one token unit, and then exhausting pools collectively contain tokens worth hundreds of millions of dollars.”
The incident and posthumous update reflect the unfortunate trend of using and hacks of cyber security affecting the cryptographic and web3 industry.
The management in the industry constantly warned that industry companies must establish security and protect users before regulatory bodies limit and impose security on the industry.
Related: Twice joyful? The Cetus recovery plan for Sui reflects the Solan plan
Decentralized replacement CETUS has hacked, causing $ 223 million losses
On May 22, Cetus replacement was hacked, which causes $ 223 million of the user loss within 24 hours.
Cetus and Sui Foundation have also announced that the Walidacists of the Sui network have froze most of the stolen assets.
According to Cutus team, $ 163 million from $ 223 million was frozen by validators and ecosystem partners on the same day as Hack.
The answer attracts criticism and accusations of centralization
The decision to freeze the stolen funds attracted mixed reactions of the cryptographic community, and decentralization is in favor of criticizing the validators for entering and controlling the chain.
“Walidacze Sui actively censor transactions in the entire blockchain”, one user wrote WX, they will repeat many other posts.
“This completely undermines the principles of decentralization and transforms the network into nothing more than a centralized, allowed database,” continued post.
“It is interesting how many Web3 projects supported by VCS are strongly based on centralization, despite borrowing the Bitcoin ethos,” wrote Steve Bowyer in May 23 x x post.
Warehouse: False fraud of the Rabby portfolio combined with the director of Dubai Crypto and many other victims
