2026年还能看到这种漏洞，以及Balancer...
🚨SlowMist TI Alert🚨
💸 @Balancer Loss: ~234k USD
🔍 Root Cause: Balancer V1 BPool `joinswapPoolAmountOut` lets caller specify BPT output while `calcSingleInGivenPoolOut` reverse-computes input via 18-decimal fixed-point math. After attacker compressed WBTC reserves to dust via public swaps, the computed input rounded down to 1 satoshi WBTC yet full BPT was minted. Missing: minimum effective input, minimum pool balance, and relative-error validation; `MIN_BALANCE` only enforced in `bind/rebind`.
📌 Attacker: 0x338c7ec9befbb451d66fd8a468c32184f5689a41
📌 Attack Contract: 0x9caa8d0e44b22f50057d2f4ce0d1446529e11be3
📌 Vulnerable Contract: 0x2257aaac34bcb27900291f7b84ee2565a6cbac57
Impact: Nested flash loans (Spark/Aave, Morpho, Uniswap V3) funded WBTC reserve compression; 4,408.8 BPT minted at 1-satoshi WBTC per join, then proportionally exited to drain DPI, USDC, WETH, WBTC from the pool.
Powered by SlowMist.AI
Tx: etherscan.io/tx/0x72510b257c…
etherscan.io/tx/0xeef311556b…
etherscan.io/tx/0x37e47f0f5f…
etherscan.io/tx/0xbaedc537df…
etherscan.io/tx/0xb2d84f926b…
也许是下一个Altura，目前NUSD的市场价格波动尚且不大，建议立即降低暴露敞口，避免潜在的风险。
Neutrl has temporarily paused minting, redemptions, and other protocol functions following circumstances affecting protocol reserves. These measures have been taken in the interest of our users, after advice from legal counsel, to preserve an orderly process while the impact is assessed.
Users will be provided with a clear and orderly process in due course. Further information on timing, and next steps will be shared as soon as available.
#SecondFi 钱包的事件相信大家已经听说，然而很有趣的是这部分的错误实现是在新版本的钱包中被引入的，问题也并不在于初始的私钥生成部分。
在新版本中，96-byte xprv 被传入普通的 PrivateKey signer，只取前 32-byte kL，丢掉 kR，因此变成使用可公开运算的 H(M) 生成 nonce，由于链上签名满足 S=r+H(R,A,M)·kL mod L，R/S/A/M 都是公开可见的，r 能够由 M 计算得出，所以只要使用新钱包通过受影响路径发送/签署过任意一笔交易就能解出 kL，而拥有 kL 就相当于拥有对应私钥的签名能力。
整个错误都是额外引入的，让人不禁怀疑团队内部的交接状态和整体工程流程。为什么这种重大问题会在一个品牌迭代的过程中被引入？我想也许这个问题会很难有一个合适的答案。
Altura宣布关闭，又一个“零知识储备证明”。
Dear Users,
Over the past 24 hours, we have experienced an unprecedented level of withdrawal requests and have successfully processed more than 8.5 million USDT in instant redemptions.
Given the sustained withdrawal demand and current market sentiment, we have made the difficult decision to begin an orderly wind-down of the Altura vault. Our priority remains the protection of user capital and ensuring all redemptions are completed in a fair, transparent, and efficient manner.
To facilitate this process, we have notified all counterparties and partners of our decision and have started unwinding positions across the portfolio. These positions include allocations held on exchanges, private credit opportunities, and real-world asset strategies. While some positions can be redeemed immediately, others require standard settlement and redemption periods, and we are working closely with all counterparties to accelerate the process wherever possible.
We want to reassure all users that the wind-down is being conducted in a structured manner and that capital is being returned as underlying positions are redeemed.
Despite it being a weekend, our team has worked around the clock to process withdrawal requests and maintain continuous communication with partners and users. I am incredibly proud of the effort and commitment demonstrated by everyone involved during this period.
Personally, I am deeply disappointed by how quickly misinformation and speculation can spread within the industry. Altura has always operated with transparency and integrity, and it is unfortunate to see unfounded narratives contribute to market fear and withdrawal pressure.
Nevertheless, our focus remains unchanged: executing an orderly wind-down and returning capital to users as efficiently as possible.
We will continue providing regular updates as redemptions progress and additional liquidity becomes available.
Thank you for your trust and support throughout this process.
Ranveer Arora
CEO, Altura
零知识储备证明：你对存款状态零知识，他们对偿付义务零知识，跑路后大家对资金去向也零知识。名副其实。
Accountable has terminated its service agreement with MainStreet, effective immediately. MainStreet was unable to meet our verification standards.
We recognize that markets relied on this feed and are working closely with partners across the ecosystem as the situation evolves.
We will continue to hold this standard without exception.
经过约7个月，@ether_fi 已对此前被盗刷的$497.84进行了全额退款。感谢 @MikeSilagadze 介入并且跟进了我的事件。
虽然是一个迟到的结果，但是终究是得到了解决。
同样希望其他受影响的用户也能得到妥善解决。
2025年10月24日，我的 @ether_fi Cash卡遭到盗刷，共计约$497.84美元，我当天就冻结卡片随即联系客服发起争议。
@MikeSilagadze 在这篇帖子下公开承诺所有受盗刷影响的用户都将获得退款。
七个月过去了：没有退款、没有官方声称已发送的私信、有的只是一套重复粘贴的推诿说辞。
而其他用户的遭遇也与我基本一致。
以下是这几个月里实际发生的事：
→ 先后经手五位客服（Luna、Zucher、Zahar、Solomon、Leo），每次换人都要重新解释案情，毫无实质进展
→ Visa 以「3DS 已验证」为由拒绝争议——但我从未收到任何验证请求，多次索要验证日志，至今无果
→ 3 月收到的「调查结果」与最初的拒绝通知几乎一字不差，明显是模板复制
→ 5 月 11 日客服明确 acknowledge 了我设定的 5 月 21 日截止日，截止日过去后直接消失
与此同时，@ether_fi 官方也声称已向受影响用户发送了私信。我从未收到任何私信。
更讽刺的是：就在同一天，@MikeSilagadze 亲自在 @wisdom_yang 的帖子下联系了另一位受害者并协助加急退款。我当时就在那条帖子的评论区里询问，留言至今还在。
同样的欺诈，同样的承诺，不同的待遇。
其他在 2025 年第四季度遭到盗刷的用户——你们的问题解决了吗？
On October 24, 2025, my @ether_fi Cash card was hit with unauthorized charges totaling approximately $497.84. I froze the card the same day and contacted support to file a dispute.
Under this post, @MikeSilagadze publicly stated that all users affected by fraudulent transactions would be refunded.
Seven months later: no refund, no DM that the official account claimed had been sent, and nothing but repeated copy-paste deflections from support.
Here is what actually happened over the past several months:
→ My case was passed between five different support agents: Luna, Zucher, Zahar, Solomon, and Leo. Each time, I had to explain the situation again, with no substantive progress.
→ Visa declined the dispute on the basis that “3DS was verified” — but I never received any 3DS challenge. I repeatedly requested the 3DS authentication delivery logs, and none have been provided.
→ The “investigation result” I received in March was almost word-for-word identical to the original rejection notice. It appeared to be a copied template, not a real review.
→ On May 11, support explicitly acknowledged my May 21 deadline for a substantive response. After the deadline passed, they simply disappeared.
Meanwhile, the official @ether_fi account also claimed that DMs had been sent to affected users. I never received any DM.
What makes this even more frustrating is that, on the same day, @MikeSilagadze personally replied to @wisdom_yang, another fraud victim, and helped expedite their refund. I was already asking about the same fraud issue in the comments of that thread at the time. My comment is still there.
Same fraud pattern. Same public promise. Different treatment.
To other users who were hit by unauthorized EtherFi Cash card charges in Q4 2025: was your issue ever resolved?
⚠️ 今天要跟大家分享一個真實發生在我身上的事件：我的 EtherFi 卡遭到盜刷。
事情經過是這樣的：
卡片在 2025/9/16 下午 1:06 (UTC) 被授權了一筆 0 元消費（發生在 Bogota, CO，我本人根本不在當地），隨後就開始出現多筆 Garena 平台的 $49.99 美元 Pending 消費。
我稍早發現並凍結了卡片，並把所有交易紀錄下載下來，寫信通知 EtherFi 團隊處理。
即便 EtherFi 十分方便，回饋非常多，但只要是卡，仍然會有盜刷的情況存在，也無法百分之百避免風險，但我們能透過一些 小習慣 來降低損害。
✅平常能做的事
1. 卡內只放「即將消費的金額」，不要放太多
2. 設定每日消費上限
3. 每天檢視自己的消費帳單
🚨 若真的被盜刷
1. 立即凍結該卡片
2. 下載並保存所有異常交易紀錄
3. 把完整經過寫成 Mail，寄給 @EtherFi 團隊
4. 發文討拍，順便提醒大家 😅
希望我的經驗，能幫助大家更有意識地保護自己的資產。
使用任何金融工具都一樣：方便的同時，也要記得設好防護網。
對了，我被盜刷 1,600 美金。
