Andrés Soltermann

How tokenized stocks fail as collateral even when the stock price does not move

吴说获悉，据慢雾监测，Edel Finance 因价格源合约中函数读取了 ERC4626 金库，且金库直接使用底层资产余额计算，导致攻击者能够通过直接转账捐赠资产来操纵份额价格。该攻击结合了闪电贷与捐赠攻击，操纵了预言机，造成约 35 万美元及其他储备金损失。慢雾指出，该漏洞在于缺乏时间加权平均价格（TWAP）、费率上限或捐赠保护机制。wublock123.com/news/news-63776

1/ In total, 6 Edel markets were affected, and the attacker 0x58428161bB55c14A413945f06cbDeC157F411C76 swapped all tokens for 224 ETH (~$353K, correction) and deposited into Tornado Cash.

RT @edeldotfinance: xPoints are live on Edel. Supply and utilize your xStocks as collateral on Edel to earn xPoints. Those same xSto…