Truebit Protocol Faces Security Breach Due to Integer Overflow Vulnerability

According to Foresight News, the SlowMist security team has released an analysis report on the security incident involving Truebit Protocol. On January 8, Truebit Protocol was attacked due to an integer overflow vulnerability in its Purchase contract, allowing the attacker to mint TRU tokens at nearly zero cost and steal 8,535 Ethereum. The root cause was identified as the lack of overflow protection mechanisms in the contract, leading to incorrect price calculations. The stolen funds were subsequently transferred to Tornado Cash. It is recommended that contracts compiled with versions of Solidity prior to 0.8.0 should always use SafeMath to protect all arithmetic operations and prevent overflow-related logical defects.