金色财经|10月 08, 2026 02:39
[MakerDAO Legacy Auction Contract Exploited, 200 ETH Taken]
Golden Finance reported on October 8, citing Protos, that security firm CertiK's analysis revealed a legacy MakerDAO auction keeper contract was exploited, with the attacker taking 200 ETH, valued at over $500,000.
CertiK stated that the root cause was the lack of access control in the 0x8804d1de function within the keeper implementation contract. This contract was involved in the March 2020 "Black Thursday" liquidation crisis, during which it won ETH with zero bids. Four bids of 50 ETH each remained unsettled, allowing the attacker to take these funds and transfer them out via TornadoCash in batches of 10 ETH each. The report noted that while this contract is not part of the current Sky ecosystem's core, it highlights that legacy contracts with residual value remain targets for exploitation.
Share To
Timeline
HotFlash
APP
X
Telegram
CopyLink