SlowMist said it detected an attack on Ethervista that resulted in losses of about $18,600. The security firm traced the issue to an integer overflow in the constant-K check inside EtherVistaPair.swap(). According to SlowMist, both reserve values were stored as uint112, and their multiplication wrapped around after overflow. That allowed the check to pass even when the actual product of reserves had dropped sharply. SlowMist also said the attacker registered a self-controlled contract as an authorized router, then used two transactions to drain WETH and VISTA from the pool. The details were disclosed in a post linked by Foresight under its market analysis category.
SlowMist said it detected an attack on Ethervista, with losses estimated at about $18,600.
According to SlowMist, the root cause was an integer overflow in the constant-K validation inside EtherVistaPair.swap(). Both reserve values were stored as uint112, and their multiplication wrapped around after overflow, allowing the check to pass even though the actual reserve product had fallen sharply.
SlowMist said the attacker registered a self-controlled contract as an authorized router and then used two transactions to withdraw WETH and VISTA from the pool.
This article was originally published by Bit.Fan. For more cryptocurrency news and market insights, visit www.bit.fan. Disclaimer:
The market information, project data, and third-party content displayed on this platform are for industry information sharing only and do not constitute any form of investment advice or return commitment.
Cryptocurrency trading carries high risks. Users should fully assess their risk tolerance and make independent decisions. All profits, losses, and legal responsibilities are borne by the users themselves.
