最新报道:Bunni released a post-mortem on a $8.4 million exploit caused by a rounding error in its smart contract's idle balance update during withdrawals. The attacker used flash loans and 44 small withdrawals to manipulate pool liquidity and prices, draining funds. Bunni has patched the vulnerability and resumed withdrawals after security audits but keeps other functions paused. The team is offering a 10% bounty for the return of stolen funds, which were routed through Tornado Cash.