Innora Discloses Two Critical Vulnerabilities in Saturn, Affecting $35 Million in Funds

Huo Xing Cai Jing reports that on April 14, security firm Innora released a report stating that the Ethereum-based yield protocol Saturn has two critical vulnerabilities: · Withdrawal freeze vulnerability: Under normal operational conditions, all user funds could be locked, with a minimum freeze period of 30 days—or indefinitely in extreme cases. This can be triggered by the protocol itself, without any hacker intervention. · The protocol’s privileged address is permitted to legally retain up to 33.33% of funds per transaction. Based on current data, this amounts to a maximum of approximately $157,000 per transaction, with a theoretical total risk of up to $4.26 million. Innora noted that over 90% of Saturn’s assets are managed “off-chain” by the privileged address, leaving users entirely dependent on trust. As of the report’s publication, these vulnerabilities remain unpatched.