TronBank

Oracle Attack

Estimated loss

—

VERDICT —UNRATED

Verdict pending. Auto-ingested incidents are reviewed before a public verdict is rendered.

▰ METHOD

ORACLE

ORACLEBYTECODE CATCHABLE →AI SCANNABLE →

Root cause

Root-cause analysis not yet published. The incident description below contains all currently available signal — review the attack transaction directly for definitive forensics.

Forensic narrative

Tron Dapp TronBank was attacked by Fake token attack at 1 am, about 170 million BTT were stolen in 1 hour (worth about 850,000 yuan). Monitoring showed that the hacker created a fake token BTTx to initiate the "invest" function to the contract, and the contract did not determine whether the sender's token id was consistent with the BTT real token id1002000. Attack method (per SlowMist): Oracle Attack. Reported loss: 170,000,000 BTT.

Primary source

https://coingape.com/tronbank-dapp-attack-tron-dapp-vulnerabilities/ ↗

Sourced from

slowmist

Technical record