Ethereum's Saturn Protocol Faces Critical Vulnerabilities

On April 14, security firm Innora released a report highlighting two critical vulnerabilities in the Ethereum-based financial protocol, Saturn. According to BlockBeats, these issues pose significant risks to user funds. The first vulnerability, known as the withdrawal freeze bug, could potentially lock all user funds under normal business operations. This freeze could last a minimum of 30 days and, in extreme cases, indefinitely, without any hacker intervention as the protocol itself can trigger it. The second issue involves a privileged address within the protocol that can legally intercept up to 33.33% of funds per operation. Based on current data, this could result in a single interception of approximately $157,000, with a theoretical total risk reaching up to $4.26 million. Innora noted that over 90% of Saturn's assets are managed off-chain by the privileged address, requiring complete trust from users. As of the report's release, these vulnerabilities remain unaddressed.