金色财经
金色财经|Sep 07, 2026 07:21
[Secured Finance Attacked, Losses Estimated at Approximately $104,000] According to a report by Jinse Finance on September 7, decentralized lending protocol Secured Finance's lending market was attacked on September 5, resulting in losses of approximately $104,000. The root cause was that collateral was priced based on the average transaction price in the order book of the current block, allowing the attacker to manipulate this price through self-trading, causing fraudulent loan positions to be recognized as valid collateral. After initially deploying the contract, the attacker did not execute immediately. They later conducted a flash loan and self-trading to inflate the pricing and withdrew USDC. When the original attack wallet attempted to execute, the transaction was rolled back due to insufficient gas fees. About 48 seconds later, a general frontrunning bot named "coffeebabe" seized approximately 0.9 WBTC (around $72,000) and transferred about 28.8 ETH to the builder of "ultra sound money," retaining only about $29 for itself. Subsequently, another bot extracted a portion of the remaining USDC.
+4
Mentioned
Share To

Timeline

HotFlash

APP

X

Telegram

Facebook

Reddit

CopyLink

Hot Reads