Innora exposes two major vulnerabilities in Saturn: user funds could be locked or even permanently frozen, and privileged addresses can legitimately siphon off one-third of the funds

robot
Abstract generation in progress

ME News Report, April 14 (UTC+8), security organization Innora released a report stating that there are two serious vulnerabilities in the Saturn financial protocol on Ethereum. Including:
Withdrawal freeze vulnerability: Under normal operation, all user funds could be locked, with a minimum of 30 days and in extreme cases indefinitely frozen. No hacking needed, the protocol itself can trigger this.
Privileged addresses in the protocol can legally intercept up to 33.33% of funds with each operation. Based on current data, the maximum interception per transaction is about $157k, with a theoretical total risk of up to $4.26 million.
Innora states that over 90% of Saturn’s assets are managed by privileged addresses, and users are completely reliant on trust. As of the report’s release, this vulnerability has not yet been fixed. (Source: ChainCatcher)

ETH1.16%
View Original
This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.
  • Reward
  • Comment
  • Repost
  • Share
Comment
Add a comment
Add a comment
No comments
  • Pin