Innora exposes two major vulnerabilities in Saturn: $35 million in funds at risk of being frozen, and privileged addresses can "legally" drain one-third of the funds

robot
Abstract generation in progress

Mars Finance News, on April 14th, security firm Innora released a report stating that the decentralized finance protocol Saturn on Ethereum has two serious vulnerabilities. Including:
• Withdrawal Freeze Vulnerability: Under normal operation, all user funds could be locked, with a minimum of 30 days and in extreme cases indefinitely frozen. No hacking needed; the protocol itself can trigger this.
• Privileged addresses in the protocol can legally intercept up to 33.33% of funds per operation. Based on current data, the maximum single interception is about $157k, with a theoretical total risk of up to $4.26 million.
Innora stated that over 90% of Saturn’s assets are managed “off-chain” by privileged addresses, and users are entirely dependent on trust. As of the report’s release, this vulnerability had not yet been fixed.

ETH5,41%
View Original
This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.
  • Reward
  • Comment
  • Repost
  • Share
Comment
Add a comment
Add a comment
No comments
  • Pin