约490万美元被盗，Injective疑似因二元期权漏洞暂停约4小时

Odaily News, According to monitoring by Paddy-earthling, Injective was reportedly paused for approximately 4 hours due to a binary options vulnerability. The attacker exploited a decommissioned but still-registered oracle Frontrunner to steal approximately $4.9 million. The data source for this oracle had long been cleared. The attacker created 299 markets and pointed them to this oracle. When price feeds became unavailable, it triggered a "no-price refund" mechanism, which the attacker then exploited to receive approximately 2x payouts, converting the USDC into roughly 1,980 ETH, worth about $4.9 million. The stolen assets currently reside in an Ethereum wallet that has never sent any transactions. Paddy-earthling noted that after the attack, Injective's official account continued posting marketing content without mentioning the chain had been paused.