ΠΠΎΡΡ
Π¦Π΅ΠΉ ΠΏΠΎΡΡ Π·Π° ΠΉΠΎΠ³ΠΎ id.
https://api.web3aggregator.io/api/v1/posts/20369 curl -H "Authorization: Bearer $W3A_API_KEY" 'https://api.web3aggregator.io/api/v1/posts/20369'ΠΠΎΡΡΡΠ±Π΅Π½ ΠΊΠ»ΡΡ: W3A_API_KEY Π² ΠΎΡΠΎΡΠ΅Π½Π½Ρ.
API Π²ΡΠ΄Π΄Π°Ρ ΠΎΠ΄Π½Π΅ ΡΠ΅ ΠΏΠΎΠ²ΡΠ΄ΠΎΠΌΠ»Π΅Π½Π½Ρ: ΡΠ½ΡΡ ΡΠ°ΡΡΠΈΠ½ΠΈ Π°Π»ΡΠ±ΠΎΠΌΡ ΡΠ°ΠΌ β ΠΎΠΊΡΠ΅ΠΌΡ ΠΏΠΎΡΡΠΈ, ΠΏΠΎΠ²'ΡΠ·Π°Π½Ρ ΠΏΠΎΠ»Π΅ΠΌ album.
ΠΠΎΠΊΡΠΌΠ΅Π½ΡΠ°ΡΡΡ APIπ¨ WAX Bridge Exploited for ~$90.5K
The withdraw logic accepted negative fees, so the attacker set the fee to the withdrawal amount with a minus sign, and the system deducted nothing while still sending the full amount.
Repeating the trick drained the WAX Multi-Chain Bridge across multiple chains.
π Details
The withdraw logic accepted negative fees, so the attacker set the fee to the withdrawal amount with a minus sign, and the system deducted nothing while still sending the full amount.
Repeating the trick drained the WAX Multi-Chain Bridge across multiple chains.
π Details
