Futures
Access hundreds of perpetual contracts
TradFi
Gold
One platform for global traditional assets
Options
Hot
Trade European-style vanilla options
Unified Account
Maximize your capital efficiency
Demo Trading
Introduction to Futures Trading
Learn the basics of futures trading
Futures Events
Join events to earn rewards
Demo Trading
Use virtual funds to practice risk-free trading
Launch
CandyDrop
Collect candies to earn airdrops
Launchpool
Quick staking, earn potential new tokens
HODLer Airdrop
Hold GT and get massive airdrops for free
Launchpad
Be early to the next big token project
Alpha Points
Trade on-chain assets and earn airdrops
Futures Points
Earn futures points and claim airdrop rewards
More
OpenZeppelin, a company specializing in blockchain network security, revealed a critical vulnerability in the integration of ERC-2771 and Multicall standards on Ethereum. The issue put many users and projects at risk, and even allowed the theft of funds in ether (ETH) and the stablecoin USD Coin (USDC).
The "problematic integration" of ERC-2771 and Multicall that OpenZeppelin describes in its statement affects a wide range of smart contracts, including those that support ERC-20 tokens (which use stablecoins, for example) and ERC-721 (that of non-fungible tokens, or NFTs).
This vulnerability generated a potential "address spoofing" attack. Sure enough, there were attacks that led to the theft of 87 ETH (approximately USD 205,000, according to the CriptoNoticias price index) and 17,394 USDC.
Notably, the vulnerability was detected on November 20. Open Zeppelin had received a warning about the vulnerability from the team at ThirdWeb, a company that provides technological solutions for projects in the so-called web3. The issue was made public two weeks later so that we could work on a solution before announcing it, as is often the case in these cases.