הסיווג ושיטת התקיפה משקפים את דיווחי המקורות. תיאורים מפורטים מוצגים בשפת המקור; לקריאת התחקיר המלא ניתן לפתוח את הקישור המצורף.
DefiLlamaתיאור המקור באנגלית
An attacker exploited chained balance-accounting defects in the shared Cosmos EVM module used by KiiChain. By deploying a contract at a precomputed vesting-account address and delegating one wei more KII than its spendable balance, the attacker triggered an arithmetic underflow in the staking precompile’s EVM balance write-back. Combined with a missing overflow guard in the EVM value-transfer path, this allowed real KII to be redirected from victim accounts to attacker-controlled addresses without increasing total supply. The sequence was repeated against 18 targets
SlowMistתיאור המקור באנגלית
An attacker exploited vulnerabilities in the shared Cosmos EVM module (an arithmetic underflow in the staking precompile’s balance write-back after delegation, combined with vesting account handling and other undisclosed bugs). By creating a vesting account and deploying a contract to it, the attacker repeated the technique 18 times, draining approximately 148.3 million KII from various wallets. KiiChain halted the network at block 9355723 to stop further theft.
הסיווג ושיטת התקיפה משקפים את דיווחי המקורות. תיאורים מפורטים מוצגים בשפת המקור; לקריאת התחקיר המלא ניתן לפתוח את הקישור המצורף.
DefiLlamaתיאור המקור באנגלית
An attacker exploited chained balance-accounting defects in the shared Cosmos EVM module used by KiiChain. By deploying a contract at a precomputed vesting-account address and delegating one wei more KII than its spendable balance, the attacker triggered an arithmetic underflow in the staking precompile’s EVM balance write-back. Combined with a missing overflow guard in the EVM value-transfer path, this allowed real KII to be redirected from victim accounts to attacker-controlled addresses without increasing total supply. The sequence was repeated against 18 targets
SlowMistתיאור המקור באנגלית
An attacker exploited vulnerabilities in the shared Cosmos EVM module (an arithmetic underflow in the staking precompile’s balance write-back after delegation, combined with vesting account handling and other undisclosed bugs). By creating a vesting account and deploying a contract to it, the attacker repeated the technique 18 times, draining approximately 148.3 million KII from various wallets. KiiChain halted the network at block 9355723 to stop further theft.
