הסיווג ושיטת התקיפה משקפים את דיווחי המקורות. תיאורים מפורטים מוצגים בשפת המקור; לקריאת התחקיר המלא ניתן לפתוח את הקישור המצורף.
DefiLlamaתיאור המקור באנגלית
A deprecated Thetanuts Finance Index Vault was exploited through an integer-division rounding flaw in its mint accounting. Using a flash loan, the attacker reduced the index token supply to a minimal level and repeatedly minted replacement shares while required underlying-token deposits rounded to zero, allowing the attacker to retain assets redeemed from the vault. The attacker extracted 105,471.499078 USDC plus residual option-token positions. About one hour later, a whitehat used the same vulnerability to secure approximately $2M of assets from another vulnerable legacy vault
SlowMistתיאור המקור באנגלית
A legacy vault of Thetanuts Finance on Ethereum was exploited due to a flaw in redemption math and integer calculations in the mint/claim functions. The attacker used flash loans to drain approximately $2.1 million after reducing token supply to near zero. A whitehat recovered most funds (~$2M), resulting in a net loss of around $105K according to the project. Current products and active contracts were unaffected.
הסיווג ושיטת התקיפה משקפים את דיווחי המקורות. תיאורים מפורטים מוצגים בשפת המקור; לקריאת התחקיר המלא ניתן לפתוח את הקישור המצורף.
DefiLlamaתיאור המקור באנגלית
A deprecated Thetanuts Finance Index Vault was exploited through an integer-division rounding flaw in its mint accounting. Using a flash loan, the attacker reduced the index token supply to a minimal level and repeatedly minted replacement shares while required underlying-token deposits rounded to zero, allowing the attacker to retain assets redeemed from the vault. The attacker extracted 105,471.499078 USDC plus residual option-token positions. About one hour later, a whitehat used the same vulnerability to secure approximately $2M of assets from another vulnerable legacy vault
SlowMistתיאור המקור באנגלית
A legacy vault of Thetanuts Finance on Ethereum was exploited due to a flaw in redemption math and integer calculations in the mint/claim functions. The attacker used flash loans to drain approximately $2.1 million after reducing token supply to near zero. A whitehat recovered most funds (~$2M), resulting in a net loss of around $105K according to the project. Current products and active contracts were unaffected.
