News

369 Guard

Global security awareness — not only PulseChain.

Industry incidents in plain English. Shareable cards that link back here. Not an audit.

Back to boardAbout

Cross-chain security awareness in plain English. Not an audit. Not financial advice. We never publish drain recipes or exploit steps. News items are research snapshots from public reporting — not always a full 369 deep-dive.

highEthereumdefi

Lien Finance BondMaker: ~$542k USDC via bond equivalence logic

SlowMist reported ~542k USDC lost after attackers abused Lien’s bond exchange path. We verified live BondMakerCollateralizedEth contracts on Ethereum expose exchangeEquivalentBonds(exceptionBonds[]) and permissionless registerNewBondGroup — matching both the multiset-validation and open-registration narratives. Victim address still holds residual USDC after the event. Same BondMaker family as the 2020 white-hat save; this time funds left.

369 take: Open bond/ticket registration plus soft equivalence or OTC pricing is a loaded gun. Before you LP into structured “bond” pools, ask whether anyone can mint paper the pool will buy without hard collateral checks.