Syndicate : l'incident de sécurité est dû à une fuite de clé privée entraînant une mise à niveau malveillante du contrat de pont, causant une perte de 380 000 dollars.

Mars Finance reports that Syndicate has issued an update regarding the previous security incident, stating that the private key leakage led to malicious upgrades of bridge contracts on two chains, resulting in the theft of approximately 18.5 million SYND tokens (about $330,000) and about $50,000 worth of customer tokens.
Affected users will receive full compensation, and SYND holders will also receive additional rewards.
The attack involved multiple stages of reconnaissance, infrastructure mapping, vulnerability exploitation development, and precise timing, ruling out the involvement of internal personnel.
The root cause of the vulnerability was the storage of the private key in a password manager, and the upgrade process did not employ multi-signature or hardware signatures.
Syndicate is strengthening security measures, including adding an encryption layer outside the password manager and adopting multi-signature or hardware signatures for upgrade paths.