The Root Cause Of Poly Network Being Hacked

On August 10, 2021, according to the news from the SlowMist Zone, the cross-chain interoperability protocol Poly Network was attacked by hackers. The SlowMist security team immediately cut into the analysis and shared the analysis results as follows. The details of the attack1. The core of this attack is that the verifyHeaderAndExecuteTx function of the EthCrossChainManager contract can execute sp

[t2wave]

polyのハックに関する詳細。秘密鍵の漏洩ではなくコントラクト関数の権限付与や機能設計の問題