Innora exposes two major vulnerabilities in Saturn: $35 million in funds risk being frozen, privileged addresses can "legitimately" siphon off one-third of the funds

BlockBeats News, on April 14, security firm Innora released a report stating that the asset management protocol Saturn on Ethereum has two critical vulnerabilities, including:

· Withdrawal freeze vulnerability: During normal business operations, all user funds could be locked, with a minimum freeze of 30 days, and in extreme cases, frozen indefinitely. No hacker is required—this can be triggered by the protocol itself.

· Each operation by the privileged address in the protocol can legally intercept up to 33.33% of funds. Based on current data, up to approximately $157,000 can be intercepted in a single transaction, with a total theoretical risk of up to $4.26 million.

Innora stated that over 90% of Saturn assets are managed "off-chain" by privileged addresses, meaning users fully rely on trust. As of the time of the report’s publication, this vulnerability had not yet been fixed.