隨著 Solana Meme Coin 詐騙增加，Animoca Brands 警告 X 帳號遭到入侵

官方聲明明確表示，最近在 Solana 區塊鏈上推出 $ANIMOCA 代幣或不可取代代幣的說法（歸因於 Animoca Brands）是駭客惡意活動的結果。

A recent string of meme coin scams on Solana has prompted Animoca Brands to issue a public notice regarding the compromise of co-founder Yat Siu’s X account.

最近 Solana 上發生的一系列迷因幣詐騙事件促使 Animoca Brands 發布了關於聯合創始人 Yat Siu 的 X 帳戶遭到洩露的公告。

The official statement clarifies that recent claims about the launch of the $ANIMOCA token or non-fungible tokens on the Solana blockchain, attributed to Animoca Brands, were actually the result of a hack. The investigation was first picked up by Kenta, a crypto game streamer.

官方聲明澄清，最近關於 Animoca Brands 在 Solana 區塊鏈上推出 $ANIMOCA 代幣或不可替代代幣的說法實際上是駭客攻擊的結果。這項調查首先由加密遊戲主播 Kenta 發起。

It seems that the @ysiu account might have been hacked ⚠️⚠️⚠️✍️

看來@ysiu帳號可能被駭客入侵⚠️⚠️⚠️✍️

Recently, he posted about @animocabrands launching the $ANIMOCA token on solscan.io, including a link to solscan.io for purchasing it. The chart price skyrocketed until he deleted the post. pic.twitter.com/2xHPLmRkVr

最近，他發布了關於 @animocabrands 在 solscan.io 上推出 $ANIMOCA 代幣的信息，其中包括用於購買 solscan.io 的連結。圖表價格飆升，直到他刪除了帖子。 pic.twitter.com/2xHPLmRkVr

The Hong Kong-based game software company stated that there is currently no official token or NFT launch from Animoca Brands and urged users to refrain from engaging with the compromised account. Animoca Brands will provide further updates once the account is restored.

這家總部位於香港的遊戲軟體公司表示，Animoca Brands 目前尚未推出官方代幣或 NFT，並敦促用戶不要使用受損帳戶。一旦帳戶恢復，Animoca Brands 將提供進一步的更新。

‼️🚨 Unfortunately @ysiu social media account has been compromised.

️🚨 不幸的是@ysiu社群媒體帳號已被盜用。

There is no official token or NFT launch from Animoca Brands. The token launch on Solana as claimed in a post was made by the hacker.

Animoca Brands 尚未推出官方代幣或 NFT。貼文中聲稱 Solana 上的代幣發行是由駭客發起的。

Please DO NOT engage with the account and stay vigilant.

請不要與該帳戶互動並保持警惕。

We will provide an…

我們將提供...

Animoca Brands Corporation was founded in 2014 by Yat Siu and David Kim. Initially focused on mobile games, the company shifted its attention to blockchain gaming and NFTs in 2018, becoming a key player in the Web3 space.

Animoca Brands Corporation 由 Yat Siu 和 David Kim 於 2014 年創立。該公司最初專注於手機遊戲，2018 年將注意力轉向區塊鏈遊戲和 NFT，成為 Web3 領域的關鍵參與者。

Vulnerabilities on the Solana blockchain

Solana 區塊鏈上的漏洞

This isn’t the first time that a scam has been executed on the Solana blockchain. The architecture of Solana makes its users particularly vulnerable to certain types of scams.

這並不是第一次在 Solana 區塊鏈上實施詐騙。 Solana 的架構使其用戶特別容易受到某些類型的詐騙。

A recent case brought by the U.S. Department of Justice highlighted this vulnerability, with the Justice Department charging two California men, Gabriel Hay and Gavin Mayo, with running NFT rug pulls on Ethereum and Solana that cost buyers over $22 million. The rug pulls involved promoting fake NFT projects like Vault of Gems and Faceless and then absconding with investors’ money. The case marks the largest NFT fraud that the DOJ has prosecuted.

美國司法部最近提起的案件凸顯了這一漏洞，司法部指控兩名加州男子 Gabriel Hay 和 Gavin Mayo 在以太坊和 Solana 上運行 NFT 地毯，導致買家損失超過 2,200 萬美元。陰謀涉及推廣 Vault of Gems 和 Faceless 等虛假 NFT 項目，然後捲走投資者的資金潛逃。該案是司法部起訴的最大一起 NFT 詐欺案。

In another incident, Canadian singer Drake’s account was compromised to promote Solana-based meme coin Anita.

在另一起事件中，加拿大歌手 Drake 的帳戶被盜用於推廣基於 Solana 的模因幣 Anita。

Why is Solana vulnerable to scams?

為什麼 Solana 容易遭受詐騙？

While Solana’s architecture may be designed for efficiency, it introduces a number of risks that make it more vulnerable to scams than other networks.

雖然 Solana 的架構可能是為了提高效率而設計的，但它引入了許多風險，使其比其他網路更容易受到詐騙。

The token account structure used by Solana allows attackers to use specific commands to reassign ownership of assets, rendering the funds virtually unrecoverable.

Solana 使用的代幣帳戶結構允許攻擊者使用特定命令重新分配資產所有權，從而使資金幾乎無法收回。

Additionally, Solana’s one-step transaction approval, compared to Ethereum’s multiphase allowance of contract functions, can result in instant and irreversible losses once a malicious transaction is authorized. The platform’s ability to group multiple sub-transactions into one approval also compounds the risk of undetected thefts.

此外，與以太坊多階段允許合約功能相比，Solana 的一步式交易批准一旦惡意交易被授權，可能會導致即時且不可逆轉的損失。該平台能夠將多個子交易分組到一個批准中，這也增加了未被發現的盜竊風險。

The capacity for delaying the execution of fraudulent operations to evade alerts and surprise victims is another tactic used by scammers. This capability, known as Durable Nonce, makes the platform ripe for scams, especially when coupled with users’ lack of awareness of the operational risks of Solana.

詐騙者使用的另一種策略是延遲執行詐騙操作以逃避警報並讓受害者感到驚訝。這種被稱為「持久隨機數」的功能使得該平台很容易發生詐騙，特別是當用戶缺乏對 Solana 營運風險的認識時。