BlockBeats News, April 14th, security firm Innora released a report stating that the financial protocol Saturn on Ethereum has two critical vulnerabilities. These include:
· Withdrawal Freeze Vulnerability: Under normal business operations, all user funds could be locked, with a minimum of 30 days and potentially an indefinite freeze in extreme cases. No need for hackers, the protocol can trigger this on its own.
· The privileged address in the protocol can legally withhold up to 33.33% of funds per transaction. Based on current data, a single withholding could be up to about $157,000, with a total theoretical risk of $4.26 million.
Innora stated that over 90% of Saturn's assets are managed by a privileged "off-chain" address, leaving users completely reliant on trust. As of the report's publication, this vulnerability remains unfixed.
