Beosin: Terra Chain Event Vulnerability Belongs is a Vulnerability in the Cosmos Base Library
According to a Beosin Alert monitoring alert, it was discovered that the Terra chain was suspended due to an emergency upgrade. It appears that an IBC vulnerability has been exploited to mint multiple tokens on the Terra chain, including ASTRO.Analysis by the Beosin security team has found that the attacker, after instantiating the contract on Terra, has transferred approximately 60 million ASTRO, 3.5 million USDC, 500,000 USDT, and 2.7 BTC, exploiting a reentry vulnerability in the timeout callback in the ibc-hooks. This vulnerability was disclosed in April of this year and is part of a vulnerability in the cosmos base library that Terra has not fixed.
Disclaimer: The content of this article solely reflects the author's opinion and does not represent the platform in any capacity. This article is not intended to serve as a reference for making investment decisions.
You may also like
The US spot Ethereum ETF had a net outflow of 277.08 million USD yesterday
Federal Reserve's Daly: The decision to cut interest rates this week was very difficult