Innora tiết lộ hai lỗ hổng nghiêm trọng trong Saturn, ảnh hưởng đến 35 triệu USD tiền vốn

The Huoxing Finance report states that on April 14, the security firm Innora released a report indicating that the Ethereum-based yield protocol Saturn has two critical vulnerabilities: · Withdrawal freeze vulnerability: Under normal business operations, all user funds could be locked, with a minimum freeze period of 30 days and potentially indefinite in extreme cases. This can be triggered by the protocol itself, without requiring a hacker. · The privileged address within the protocol can legally withhold up to 33.33% of funds per operation. Based on current data, a single operation could withhold approximately $157,000, with a theoretical total risk reaching up to $4.26 million. Innora noted that over 90% of Saturn’s assets are managed “off-chain” by the privileged address, leaving users entirely reliant on trust. As of the report’s publication, this vulnerability remains unpatched.