以太坊基金会向披露 ERC-4337 高危攻击的安全团队 Trust Security 发放 5 万美元漏洞赏金
Xin Lang Cai Jing·2026-02-06 02:27
Core Insights - Ethereum Foundation awarded a $50,000 bug bounty to Trust Security for discovering a "high severity" attack vector in ERC-4337 (account abstraction) [1] - The identified issue could enable "review/harassment" attacks on account abstraction transactions, causing valid and correctly signed transactions to be maliciously rolled back and consume Gas [1] - Ethereum Foundation has completed a fix in the latest version and recommends related protocols to upgrade promptly [1]