Exchange Ranking
Top Exchanges
24h Volume Ranking
Popularity Ranking
Exchange BTC Balance
Proof of Reserves
Decentralized Exchanges
Funding Rate
Funding Heatmap
Liquidation Data
Max Pain
Long/Short Ratio
Whale L/S Ratio
Binance/Okex/Huobi L/S
Bitfinex Margin L/S
ETF Tracker
Solana ETF
XRP ETF
Hong Kong ETF
Bitcoin Treasuries
Crypto Reversal
Ethereum Reserves
HyperLiquid Wallet Analysis
Hyperliquid Whale Watch
Large Transactions
On-chain Movement
Bitcoin ROI
Stablecoin Market Cap
Options Analysis
News
Articles
Economic Calendar
Features
Wallet
Contract Calculator
Security
Collections
Watchlist
Following
AAVE 
ETH 以太坊基金会提出协议级防御方案，旨在防范重大资金损失
以太坊基金会（Ethereum Foundation）指出，一种协议级的防御机制本可拦截价值15亿美元的Bybit黑客攻击以及价值5000万美元的Aave交换灾难。然而，基金会表示，该解决方案预计要到2027年才能上线。此外，基金会强调，即使该技术已可用，它也无法阻止导致2026年大部分资金损失的“私钥泄露”和“社会工程学”攻击。
交易执行后链上执行的规则
在10月5日周一发布的博客文章中，基金会的“万亿美元安全倡议”（Trillion Dollar Security initiative）探讨了“原生交易断言（native transaction assertions）如何在当前防御失效时保护用户，以及其背后的设计选择。”
该倡议于5月设立，旨在作为生态系统的一项努力，以提升以太坊的安全性。
Existing practice is to sign authorise a request; however, the result depends on the code and state that the request satisfies at execution time. This means that Ethereum runs authorized content without checking whether the results meet expectations. This is the gap the foundation hopes to fill, and they see "assertion" as the solution. It works by allowing accounts to check what transactions are actually executed. It compares balances (i.e., starting and final balances), stores data and events, and compares them to established rules. If rule verification fails, the entire transaction will be rolled back.
The foundation views EIP-7906 as a potential solution to this issue. The proposal adds a read-only check at the end of the transaction and builds on the EIP-8141 framework transaction model.
Intention mismatch versus result mismatch
The foundation divides losses caused by signatures into two categories. The first category is "intent mismatch" where users approve actions they believe they are not approving. The Bybit incident is a typical example of this kind of situation, when the signature interface was maliciously disguised, causing Bybit's signer to authorize Safe to implement contract replacement. The mastermind behind the scenes-the North Korea-linked Lazarus Group-stole about 400,000 ETH pieces. The Ethereum Foundation said a fixed rule prohibiting changes to the contract could have reversed the deal.
The second type of signature loss noted is when the request to sign itself is honest, but the result is still wrong. The case the foundation uses to describe such losses is the Aave incident. In March 2026, a user exchanged $50.4 million worth of aEthUSDT for aEthAAVE worth approximately $36,000 through the CoW Swap widget on the Aave interface. Because outdated Gas caps rejected options with better offers and the winning solver failed to execute, the worst route became the only choice. If you set an assertion of the lowest acceptable output, the transaction will be blocked regardless of any warning issued by the interface.
Limitations of defense measures
CertiK reported that it lost US$1.32 billion in the first half of 2026 due to cryptocurrency security incidents. According to TRM Labs, groups linked to North Korea accounted for about two-thirds of the losses. TRM Labs also found that infrastructure and operational level vulnerabilities accounted for approximately 15% of incidents, but caused nearly 76% of financial losses.
The assertion mechanism has limited effectiveness in these situations. For example, the Drift vulnerability resulted in losses of $285 million due to a six-month social engineering operation that resulted in contributors 'machines being breached. Another example is Bitget's loss of $387.5 million in September due to the leak of the private key of hot wallet. The foundation acknowledges this limitation: Rules are effective only if they stem from independently approved intentions or established strategies that an attacker cannot rewrite. If opponents hold the key, they will also sign the assertion.
Timetable for Hegotá upgrades and possible extensions
EIP-8141, which serves as the basis for the framework transaction, is planned to be included in the Hegotá upgrade. However, EIP-7906 only reached the "consideration for inclusion" stage in the Hegotá meta-proposal and has not yet been confirmed. The foundation's latest article increases the likelihood that EIP-7906 will be confirmed.
