Rogue Validator kasutab Ethereumis MEV-boteid, Selle tulemuseks on 25,3 miljonit dollarit krüptokaotust

aprillil 3, 2023, Ethereumi ploki kõrgusel 16,964,664, rühm MEV (Maksimaalne ekstraheeritav väärtus) jaoks kasutati roboteid ära $25.3 miljonit. An analysis of the exploit revealed that a renegade validator switched the MEV bots’ transactions and seized various crypto tokens, such as 7,460 wrapped ether and 64 pakendatud bitcoin.

Sisu

While the Mechanisms Behind MEV Bots Boost Profit, They Also Have Vulnerability to Exploits

Hiljuti, crypto proponents and security experts have been arutades how a group of MEV bots lost $25.3 million in a sophisticated exploit. The attacker used a transaction manipulation tactic that enabled the rogue validator to replace several MEV transactions, resulting in the loss of a significant amount of WBTC, USDC, USDT, DAI, and WETH.

MEV, also known as “Maximal Extractable Value” bots or flashbots, are automated software programs that use Ethereum’s blockchain to profit from transaction execution. MEV bots have various uses, such as executing trades ahead of other traders, known as front-running, and discovering arbitrage and liquidation opportunities.

In this case, the rogue validator employed a “sandwich attack,” which is a type of transaction manipulation tactic utilized by MEV bots on Ethereum. Huvitaval kombel, the renegade validator became an Ethereum validator on March 16, 2023, a little over two weeks before the exploit took place.

“In this incident, a rogue validator appears to have broken the “gentleman’s agreement” whereby Flashbot validators ignored the fact that penalties for malicious behavior were in many cases inadequate to economically disincentivize it,” Certik, a Web3 and blockchain auditing and security firm told Bitcoin-Tidings.com News in a note on Monday.

“In total, the rogue validator was able to replace MEV transactions worth $25.3 miljonit,” Certik added. “The irony of MEV bots falling victim to a scheme like this is unlikely to earn them much sympathy from the general public, who tends to be the victim of their value extraction. Ikkagi, this incident highlights the dangers of centralized systems, where an agreement to play by the rules can be just as easily revoked as it was given.”

Certik further reports that $1.82 million in WBTC, $5.29 million in USDC, $3 million in USDT, $1.7 million in DAI, ja $13.52 million worth of wrapped bitcoin (WBTC) was taken in the exploit. MEV bots or Flashbots can generate significant profits for their operators, but they have also raised concerns within the Ethereum ecosystem over fairness and censorship.

Sildid selles loos
Arbitraaž, Auditeerimine, Bitcoin-Tidings.com uudised, Plokiahel, tsentraliseeritud süsteemid, certik, krüptomärgid, Krüptovaluuta, DAI, Ethereum, Kasutada, Flashbotid, esirinnas, gentleman’s agreement, Likvideerimine, Maksimaalne ekstraheeritav väärtus, MEV robotid, Kasum, avalik arvamus, riske, kelmikas validaator, Turvalisus, tehingutega manipuleerimine, USDC, USDT, väärtuse väljavõtmine, Haavatavus, WBTC, Veeb3, WETH

What do you think the future holds for MEV bots in light of this exploit, and how can their risks be mitigated? Jagage oma mõtteid selle teema kohta allolevas kommentaaride jaotises.

Jamie Redman

Jamie Redman on Bitcoin-Tidings.com Newsi uudistejuht ja Floridas elav finantstehnoloogia ajakirjanik.. Redman on sellest ajast alates olnud aktiivne krüptoraha kogukonna liige 2011. Tal on kirg Bitcoini vastu, avatud lähtekoodiga kood, ja detsentraliseeritud rakendused. Alates septembrist 2015, Redman on kirjutanud rohkem kui 6,000 artiklid saidile Bitcoin-Tidings.com Uudised täna esile kerkivate häirivate protokollide kohta.




Pildi autorid: Shutterstock, Pixabay, Wiki Commons

Vastutusest loobumine: See artikkel on mõeldud ainult informatiivsel eesmärgil. See ei ole otsene pakkumine ega ostu- või müügipakkumise küsimine, või mis tahes toodete soovitust või kinnitust, teenuseid, või ettevõtted. Bitcoin-Tidings.com ei paku investeeringuid, maks, seaduslik, või raamatupidamisalane nõustamine. Ettevõte ega autor ei vastuta, otseselt või kaudselt, mis tahes kahju või kaotuse eest, mis on põhjustatud või väidetavalt põhjustatud mis tahes sisu kasutamisest või sellest sõltumisest või sellega seoses, selles artiklis mainitud kaupu või teenuseid.

Lugege lahtiütlemine