News

BlockBeats News, May 29, Aave Labs has initiated a new proposal to establish a unified asset technical review framework for Aave V3, V4, and Horizon, setting standardized review mechanisms for new asset listing, existing asset scalability, and ongoing asset retention. The proposal states that all future assets must meet various technical requirements, including ERC20 compatibility, oracle reliability, bridge security, permission controls, minting mechanisms, audit status, and introduces continuous monitoring to ensure long-term compliance with protocol security standards. Aave emphasizes that this framework aims to address the "hidden risks" associated with some assets, such as infinite minting, weak upgradeability permissions, inconsistent bridge supplies, opaque redemption paths, and off-chain custody dependencies. While these issues may not necessarily be reflected in market data, they could directly threaten the protocol's solvency, liquidation system, and collateral parameters security. According to the proposal, assets with significant technical flaws may face reduced borrowing limits, collateral parameter restrictions, delayed listing, or even be recommended for protocol rejection. The framework also specifically highlights additional reviews for cross-chain assets, yield-bearing assets, and RWA-type off-chain dependent assets, including bridge structures, off-chain legal arrangements, custody mechanisms, and supply integrity.

According to ChainCatcher, the on-chain security analysis account Eye reported that BNB Chain project launch platform DxSale is suspected of using a hidden backdoor to drain funds from old liquidity pools locked in 2021, involving more than 1,400 LPs and an amount of around $7.3 million. The analysis states that the attack included a "silent ownership transfer," operations across more than 80 wallets, and other maneuvers. After the LPs were drained, the attacker's address received over 1,200 BNB (approximately $763,000), believed to come directly from multiple stolen LP pools. What raises further suspicion is that this address had been dormant for a long period but has a direct on-chain link to a wallet marked as related to the DxSale team, and it is also one of the major fund inflow addresses for the DxSale smart contract. Subsequently, the attacker’s address transferred about 3,400 BNB (around $1.2 million) to multiple wallets and completed fund transfers through several deposit addresses at an exchange. Eye pointed out that if these allegations are true, it would mean the DxSale team may have reserved a backdoor for the platform years ago and eventually executed the attack themselves. Eye also called on the exchange to freeze the related funds, arguing that these assets essentially belong to the project investors who financed through DxSale. DxSale was once one of the most well-known launchpads and LP lockup infrastructures on BNB Chain, with projects like SAFEMOON having used its services.

Against this backdrop, some banks have begun adjusting their gold accumulation plan businesses by reducing fees and optimizing services to enhance customer activity. The continued expansion of gold accumulation business by banks does not mean the associated risks have disappeared. Some investors who entered the market at high prices have suffered significant losses. One investor stated that their gold accumulation purchased in batches had already lost more than 10%. Industrial and Commercial Bank of China, Industrial Bank, China Merchants Bank, and other banks emphasized in their gold accumulation plan adjustment announcements that gold prices may experience short-term sharp fluctuations due to unexpected policies, changes in market sentiment, or international events, leading to rapid changes in the market value of gold account holdings. Investors should consider their own financial situation and risk tolerance, reasonably control their positions, and enhance risk awareness.