GoPlus Security 🚦 (@GoPlusSecurity): 🧵1/4
Estimated coin impact
Scores are not price-change percentages. High impact means a score of +70 or more, or -70 or less.
🧵1/4 ⚠️ Vulnerability Analysis: Breakdown of the Taiko Exploit on Ethereum L2 The vault contract of @taikoxyz on #ETH was exploited, resulting in losses exceeding $1.7 million. 🔍 Attack Flow Analysis: In the attack transaction below, the attacker registered two malicious SGX instances. During the execution of the registerInstance function, the crafted parameters successfully passed the DCAP verification performed by the verifyParsedQuote function, including ECDSA signature verification and certificate chain validation. https://etherscan.io/tx/0x2f44dc1b883522a88f9b0cbbdfabf9ec33884b69dd4326600c3fab7fb2277260