拜比特沒有被黑客入侵？

在BYBIT安全事件發生近一周後，兩家網絡安全公司，Verichains和Sygnia Labs已經出現了細節，這些公司已經確認了BYBIT沒有受到損害，並且該漏洞在多智能服務的一邊。

Almost a week after the Bybit security incident, details have emerged from two cybersecurity companies, Verichains and Sygnia Labs, which have confirmed the assumption that Bybit was not compromised and the vulnerability was on the side of the multi-sig service Safe.

在BYBIT安全事件發生近一周後，兩家網絡安全公司，Verichains和Sygnia Labs已經出現了細節，這些公司已經確認了BYBIT沒有受到損害，並且該漏洞在多智能服務的一邊。

So Bybit Was Not Hacked?

所以拜比沒有被黑客入侵嗎？

Recall that Bybit turned out to be a record-breaking $1.4B loss incident but also showed record-breaking speed of rebalancing and unprecedented support from partners and big players in the crypto industry.

回想一下，拜比特證明是一個創紀錄的1.4B美元損失事件，但也顯示出創紀錄的重新平衡速度，並在加密貨幣行業的合作夥伴和大型球員那裡得到了前所未有的支持。

Now, the buzz has started to go down and the ZachXBT investigation that began pointing to the role of North Korean hackers, namely Lazarus Group, has started to accumulate new details.

現在，嗡嗡聲已經開始下降，Zachxbt的調查開始指出朝鮮黑客的角色，即拉撒路集團，開始積累新的細節。

Two leading cybersecurity firms Verichains and Sygnia Labs conducted independent investigations and concluded that the accusations against the technical security of Bybit’s systems were probably hasty.

兩家領先的網絡安全公司Verichains和Sygnia Labs進行了獨立的調查，並得出結論認為，針對Bybit Systems的技術安全的指控可能是倉促的。

Their report says that the claims that the exchange’s infrastructure was compromised are not accurate and that the incident was likely due to a vulnerability in the multi-sig service that the exchange uses for transferring funds from its cold wallets to hot wallets.

他們的報告說，交換基礎設施受到妥協的說法是不准確的，並且該事件可能是由於多智能服務中的脆弱性造成的，該交易所用來將資金從其冷錢包轉移到熱錢包。

To elaborate, their report points to the following sequence:

為了詳細說明，他們的報告指向以下順序：

Proxy wallet management compromise

代理錢包管理妥協

Spoofs the logic of the proxy contract

欺騙代理合同的邏輯

Funds withdrawal

資金提款

Bybit CEO Ben Zhou also shared the findings of Verichains and Sygnia Labs, which asserted not only that the problem was likely on the Safe services side, but that Bybit’s infrastructure was not compromised.

Bybit首席執行官Ben Zhou還分享了Verichains和Sygnia Labs的發現，這些發現不僅斷言問題可能在安全服務方面，而且據Bybit的基礎設施並未受到損害。

However, how exactly the attackers were able to introduce malware into the signing infrastructure, such as through a chain of vendors, updates, or an insider, so the investigation is ongoing.

但是，攻擊者如何能夠將惡意軟件引入簽署基礎架構，例如通過一系列供應商，更新或內部人士，因此正在進行調查。

Conclusion

結論

These are probably not the final details, however, it is very important that they speak in favor of Bybit, one of the largest crypto exchanges in the world responsible for billions of dollars worth of trading.

這些可能不是最終的細節，但是，重要的是，他們支持Bybit，這是世界上最大的加密貨幣交易所之一，負責數十億美元的交易。

Be aware and stay tuned for updates on the rapidly evolving regulations and crypto landscape.

請注意，並繼續關注有關快速發展的法規和加密景觀的最新信息。

The information provided in this article is for informational and educational purposes only and does not constitute financial, investment, or trading advice. Any actions you take based on the information provided are solely at your own risk. We are not responsible for any financial losses, damages, or consequences resulting from your use of this content. Always conduct your own research and consult a qualified financial advisor before making any investment decisions. Read more

本文提供的信息僅用於信息和教育目的，不構成財務，投資或交易建議。根據提供的信息，您採取的任何行動都只有您自身的風險。我們對您使用此內容造成的任何財務損失，損失或後果概不負責。在做出任何投資決策之前，請務必進行自己的研究並諮詢合格的財務顧問。閱讀更多