DEX Atomic因签名重放漏洞遭攻击，损失约3万USDC
PANews 8月8日消息，据慢雾监测，去中心化交易所Atomic协议因签名重放漏洞遭攻击，损失约29,984枚USDC。漏洞源于合约0xa806010f在签名摘要中缺少position ID、position manager、caller、nonce、deadline和chain ID绑定，导致同一manager签名可在21个不同position ID上重放，在闪电贷价格操纵下执行未经授权的全额LP销毁，且无TWAP或滑点检查。
DEX Atomic exploited via signature replay vulnerability, loses ~30K USDC
SlowMist monitoring shows DEX Atomic Protocol was exploited for about 29,984 USDC. The vulnerability stemmed from contract 0xa806010f missing position ID, position manager, caller, nonce, deadline, and chain ID binding in the signature digest, allowing the same manager signature to replay across 21 different position IDs under flash loan price manipulation.