By the end of April, I saw a security incident: a DeFi protocol’s vault was attacked, and the loss was nearly $400,000. What Shield detected was that the 3rd-deal vault of YieldCore had a problem.



It looks like the vulnerability is in the caller authorization check. The attacker took advantage of this missing piece to directly transfer all the funds out of the vault. That’s pretty brutal—just a single authorization check not handled properly, and tens of thousands of dollars are gone.

Recently, DeFi security incidents have been happening a bit too often. It feels like many projects’ vault designs still have vulnerabilities. When you use protocols like these, do you also need to be extra careful?
View Original
This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.
  • Reward
  • Comment
  • Repost
  • Share
Comment
Add a comment
Add a comment
No comments
  • Pin