Innora Exposes Saturn's Two Major Vulnerabilities: $35 Million Fund at Risk of Being Frozen, Privileged Address Can "Legally" Take Away 1/3 of Funds

Innora, a security firm, released a report on April 14 stating that the Ethereum-based financial protocol Saturn has two critical vulnerabilities: - **Withdrawal Freeze Vulnerability**: Under normal operations, all user funds could be locked—for a minimum of 30 days, and potentially indefinitely in extreme cases. No hacker involvement is required; the protocol can trigger this on its own. - **Privileged Address Withholding**: The protocol’s privileged address can legally withhold up to 33.33% of funds per transaction. Current data shows a single withholding could reach roughly $157,000, with a theoretical total risk of $4.26 million. Innora noted that over 90% of Saturn’s assets are controlled by a privileged off-chain address, leaving users entirely reliant on trust. As of the report’s publication, the vulnerabilities remain unfixed.