GoPlus: ListaDAO's liquidity staking vault was attacked, and the attacker exploited a logical vulnerability to steal funds
By: www.chaincatcher.com|2026/04/16 19:12:17
0
Share
Prefer us on Google
GoPlus Security released an analysis stating that the Liquid Staking Vault contract of ListaDAO was attacked due to a business logic flaw. The attacker triggered the share calculation function of the Dividend contract when transferring specific tokens, which affected the reward distribution logic of the staking vault, ultimately stealing a large amount of assets from the contract.
GoPlus Security reminds that this logical vulnerability exists in both the Liquid Staking Vault and Dividend contracts, and any fork or reused implementation carries a high risk of being exploited. Developers and projects are strongly advised to conduct reviews and fix the vulnerabilities accordingly. Smart contract security should not rely on "one-time audits."
-- Price
--
--
--
This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.
You may also like
Projects for Modernizing Kindergartens and Purchasing Trolleybuses Completed in Ternopil
Neros Completes $250 Million Financing, Valuation Reaches $2.5 Billion
ListaDAO Addresses Third-Party Contract Vulnerability Concerns
Key Takeaways GoPlus Security revealed a vulnerability in a contract resembling those of ListaDAO. ListaDAO confirmed that their…
GoPlus: ClawHub has a vulnerability that allows for download count forgery, and popular skills may contain malicious code
According to a security alert released by GoPlus Security, Silverfort security researchers discovered a serious vulnerability in OpenClaw's skill repository ClawHub. Attackers can bypass all protective mechanisms by calling the internal function downloads:increment, allowing them to inflate the down...
GoPlus discloses a new type of Android malware PromptSpy, which utilizes AI large models to achieve remote control of devices
GoPlus Security warns users to be cautious of a new type of Android malware called PromptSpy. This malware lures users into downloading APK files through phishing websites (such as those disguised as bank websites) and can remotely control devices after obtaining accessibility permissions.What makes...
GoPlus Releases SafuSkill, Building a Security-First AI Agent Skills Marketplace
BlockBeats News, March 12th, as the application of AI Agents in the Web3 ecosystem accelerates, Skills are gradually becoming the core capability module for Agent task execution. However, in the current market, a large number of Skills have wide-ranging permissions and lack a security audit mechanis...
GoPlus launches AgentGuard, allowing users to securely access and use OpenClaw with peace of mind.
BlockBeats News, February 6th, GoPlus Security recently launched GoPlus AgentGuard, a native security Skill for AI Agents designed to address the emerging execution-level security risks of AI Agents.As AI Agents begin to possess real execution capabilities (such as command execution, file read/write...
GoPlus Launches EIP-7702 Attack Defense Solution, Providing Comprehensive Protection for User Fund Security
BlockBeats News, September 2nd, Ethereum's EIP-7702 Protocol Becomes a New Target of Hacker Attacks, Causing Over $5.3 Million in Losses. According to the GoPlus Security Research Institute's analysis, the attacker carried out the theft through signature phishing, malicious upgrades, permission misu...
Unveiling the Movement Liquidity Provider Sell-Off Scandal: Secret Contracts, Shadow Advisors, and Hidden Intermediaries
The governance structure and collaboration mechanism of Movement Labs have been called into question, with internal conflicts and information confusion making it difficult to dispel the impression of "insider trading." Meanwhile, the project team is attempting to shift responsibility towards external operators.
Unveiling the Movement Liquidity Provider Sell-Off Scandal: Secret Contracts, Shadow Advisors, and Hidden Intermediaries
The governance structure and collaboration mechanism of Movement Labs have been called into question, with internal conflicts and information confusion making it difficult to dispel the impression of "insider trading." Meanwhile, the project team is attempting to shift responsibility towards external operators.
Key Market Intelligence on March 4th, how much did you miss?
1. On-chain Funds: $4.8M inflow to OP; $7.7M outflow from Ethereum
2. Largest Price Swings: $GPS, $AI16Z, $S
3. Top News: Binance HODLer Airdrop Launches for GoPlus Security (GPS)
Bybit Hosts Web3 Roast: Are AI Memes a Flash in the Pan or the Future Trend?
Bybit Web3 hosts an AI Meme-themed debate, exploring AI's innovation, cultural influence, and security challenges in the Web3 space. Guests engage in a heated discussion on AI's empowerment of the meme economy, data compliance, and decentralized development, showcasing AI's immense potential in the blockchain ecosystem.
AI Detects Bottlenecks That Could Accelerate Linux Builds by Up to 70%
A Linux kernel developer turned to a language model to identify bottlenecks in the build process. Although the tool produced code that he described as terrible, a human review allowed for the preparation of 23 patches with improvements of up to 36% in full builds and 70% in incremental builds.
Semaglutide Prolonged the Lifespan of Aged Female Mice by 12%, According to a Study
A study on aged C57BL/6 female mice found that semaglutide reduced caloric intake by 24% and extended lifespan by approximately 12%, with effects similar to caloric restriction on various aging markers. Researchers caution that prolonged clinical studies are still needed to determine if this benefit...
Computer failure in UK air traffic affects over 2,000 flights
A computer failure in the UK air traffic system affected over 2,000 flights and left thousands of passengers stranded. Although British skies have reopened, the incident exposed the vulnerability of an air operation that relies on critical technological systems.
CLARITY Act: Ripple CLO urges Senate to hear crypto holders
Solana’s 300ms speed boost to outrun trading bots might come with a hidden cost
Fee-charging pools have the clearest modeled benefit for Solana, while proprietary market makers and validators face different trade-offs.
Blockchain Speed Is No Longer the Main Criterion for Blockchain Quality, According to Andreessen Horowitz
Analysts at Andreessen Horowitz, also known as a16z, believe that blockchain speed can no longer be the primary measure of a blockchain's viability. Instead, predictability takes center stage: users need to understand how the network will behave under overload, failures, and sudden spikes in activit...
Mastercard launches Agent Connect for AI shopping
Concerns for the Industry: The Accumulated Data for 2026 is Already 12% Below the Same Period in 2023
In the first seven months of the year, the industry has accumulated a contraction of -2.6% compared to 2025 and is 18.7% below the peak reached in November 2017.
It looks like a stock and trades like a stock, but it isn’t actually a stock – what is it?
Tokenized stocks can track the same companies as ordinary shares while giving investors different ownership, voting and dividend rights.
Changelly review 2026: fees, limits, KYC and exchange rates
Economic Activity Declines as Market Doubts Grow About Government's Path to Election Year
The latest data on industry and construction raises concerns among operators. Some warn that there will be no improvement for these sectors. Opinion polls continue to show negative results.
Residency in Paraguay: the hidden cost of the new exit door for Brazilians
iOS 27 to Launch on September 14 with AI-Powered Siri
Apple will launch iOS 27 on September 14, featuring Siri AI as its main novelty, although the function will initially be available in beta and limited to English. The update will also include visual changes to Liquid Glass, new icons, oversized widgets, and more detailed sound controls.
Trump Proposes Excluding Undocumented Immigrants from the 2030 Census
President Donald Trump's administration proposed redefining who counts as a resident in the 2030 census, a measure that could alter political representation, electoral maps, and the distribution of federal funds, in addition to eliminating questions about race, ethnicity, and sexual orientation.
Monero: How the Most Private Cryptocurrency Works and Its Investment Significance
Monero is a decentralized cryptocurrency with open-source code, created around one main idea: the user should control their own money, and the details of their transactions should not be visible to outsiders. The philosophy of Monero is based on three pillars: financial privacy as a fundamental righ...
US Sanctions Chinese Network Laundering Billions in Crypto
U.S. Treasury Expands Long-Term Bond Buyback by Threefold, Market Reaction is Tepid
Crypto Depository Will Open Accounts Only with Tax Identification Number
The crypto depository is a participant in the infrastructure that will account for cryptocurrency and digital rights, store such assets, open digital accounts, and accompany operations with them. It will only be able to open accounts for clients if they have a tax identification number (TIN). This w...
Projects for Modernizing Kindergartens and Purchasing Trolleybuses Completed in Ternopil
Neros Completes $250 Million Financing, Valuation Reaches $2.5 Billion
ListaDAO Addresses Third-Party Contract Vulnerability Concerns
Key Takeaways GoPlus Security revealed a vulnerability in a contract resembling those of ListaDAO. ListaDAO confirmed that their…
GoPlus: ClawHub has a vulnerability that allows for download count forgery, and popular skills may contain malicious code
According to a security alert released by GoPlus Security, Silverfort security researchers discovered a serious vulnerability in OpenClaw's skill repository ClawHub. Attackers can bypass all protective mechanisms by calling the internal function downloads:increment, allowing them to inflate the down...
GoPlus discloses a new type of Android malware PromptSpy, which utilizes AI large models to achieve remote control of devices
GoPlus Security warns users to be cautious of a new type of Android malware called PromptSpy. This malware lures users into downloading APK files through phishing websites (such as those disguised as bank websites) and can remotely control devices after obtaining accessibility permissions.What makes...
GoPlus Releases SafuSkill, Building a Security-First AI Agent Skills Marketplace
BlockBeats News, March 12th, as the application of AI Agents in the Web3 ecosystem accelerates, Skills are gradually becoming the core capability module for Agent task execution. However, in the current market, a large number of Skills have wide-ranging permissions and lack a security audit mechanis...
...
Contents
Latest articles
05/21/2026
03/04/2025
Latest coin listings on WEEX
Customer Support:@weikecs
Business Cooperation:@weikecs
Quant Trading & MM:[email protected]
VIP Program:[email protected]
