Futures
Access hundreds of perpetual contracts
TradFi
Gold
One platform for global traditional assets
Options
Hot
Trade European-style vanilla options
Unified Account
Maximize your capital efficiency
Demo Trading
Introduction to Futures Trading
Learn the basics of futures trading
Futures Events
Join events to earn rewards
Demo Trading
Use virtual funds to practice risk-free trading
Launch
CandyDrop
Collect candies to earn airdrops
Launchpool
Quick staking, earn potential new tokens
HODLer Airdrop
Hold GT and get massive airdrops for free
Pre-IPOs
Unlock full access to global stock IPOs
Alpha Points
Trade on-chain assets and earn airdrops
Futures Points
Earn futures points and claim airdrop rewards
Promotions
AI
Gate AI
Your all-in-one conversational AI partner
Gate AI Bot
Use Gate AI directly in your social App
GateClaw
Gate Blue Lobster, ready to go
Gate for AI Agent
AI infrastructure, Gate MCP, Skills, and CLI
Gate Skills Hub
10K+ Skills
From office tasks to trading, the all-in-one skill hub makes AI even more useful.
GateRouter
Smartly choose from 40+ AI models, with 0% extra fees
Innora exposes two major vulnerabilities in Saturn: user funds could be locked or even permanently frozen, and privileged addresses can legitimately siphon off one-third of the funds
ME News message. On April 14 (UTC+8), security organization Innora released a report stating that the Saturn financial protocol on Ethereum has two severe vulnerabilities. They include:
Withdrawal freeze vulnerability: Under normal business operations, all users’ funds could be locked. The minimum freeze period is 30 days, and in extreme cases it can be frozen indefinitely. No hacker is required—the protocol itself can trigger it.
The protocol’s privileged addresses can legally intercept up to 33.33% of funds with each operation. Based on current data, the maximum that can be intercepted in a single instance is about $157,000, and the theoretical total risk can be as high as $4.26 million.
Innora said that more than 90% of Saturn’s assets are managed by privileged addresses, and users are completely dependent on trust. As of the time the report was released, this vulnerability had not been fixed.
(Source: ChainCatcher)