分散的Exchange Kiloex已確認它已暫停其平台的使用情況，並在遭受750萬美元的利用後正在追踪被盜的資金。

Kiloex團隊在4月14日向X的聲明中表示，通過暫停該平台和調查的平台，該漏洞已包含。

Decentralized exchange KiloEX has confirmed it has suspended usage of its platform and is tracing stolen funds after suffering a $7.5 million exploit.

分散的Exchange Kiloex已確認它已暫停其平台的使用情況，並在遭受750萬美元的利用後正在追踪被盜的資金。

The exploit has now been contained, with use of the platform suspended and an investigation underway, the KiloEX team said in an April 14 statement to X.

Kiloex小組在4月14日向X.

“The team has immediately suspended platform usage and is working with security partners to trace the flow of funds,” KiloEX said.

Kiloex說：“該團隊立即暫停了平台使用情況，並正在與安全合作夥伴合作以追踪資金的流動。”

“We are analyzing the attack vector and affected assets. We are collaborating with ecosystem partners to trace and recover funds where possible.”

“我們正在分析攻擊向量和影響的資產。我們正在與生態系統合作夥伴合作，在可能的情況下追溯和收回資金。”

A bounty program and a full report on how the exploit occurred is also in the works, according to KiloEX.

根據Kiloex的說法，賞金計劃和有關利用方式如何發生的完整報告。

In an update, the KiloEX team said it was collaborating with BNB Chain, Manta Network, and cybersecurity firms Seal-911, SlowMist and Sherlock in an effort spanning “multiple ecosystems.”

在更新中，Kiloex團隊表示，它正在與BNB連鎖店，Manta Network和網絡安全公司SEAL-911，SlowMist和Sherlock合作，以跨越“多個生態系統”的努力。

“Our investigation has confirmed that the stolen assets are currently being routed through zkBridge and Meson,” KiloEX said.

基洛克斯說：“我們的調查已經確認，目前正在通過茲布里奇和梅森進行路線。”

“We are urgently attempting to engage with both protocols to halt ongoing transactions and prevent additional losses.”

“我們迫切地試圖使用這兩種方案來停止正在進行的交易並防止其他損失。”

KiloEX attacker exploited price oracle issue, say analysts

分析師說，Kiloex攻擊者利用價格甲骨文問題

Cybersecurity firm PeckShield said in an April 14 post to X the exploiter looted $7.5 million in total, $3.3 million Base, $3.1m opBNB and $1m BSC.

網絡安全公司Peckshield在4月14日的帖子中表示，X剝削者搶劫了750萬美元，總計330萬美元，310萬美元的Opbnb和100萬美元的BSC。

The firm has speculated the exploit is likely a “price oracle issue,” where the information used by a smart contract to determine the price of an asset is manipulated or inaccurate, leading to the exploit.

該公司推測該利用可能是“價格甲骨文問題”，其中智能合約用來確定資產價格的信息被操縱或不准確，從而導致利用。

“Our initial analysis on one transaction exploit indicates a price oracle issue,” PeckShield said.

Peckshield說：“我們對一項交易利用的初步分析表明了價格甲骨文問題。”

“The hacker exploits it to create a new position with initial given ETHUSD price of 100 and then immediately close the position with inflated ETHUSD price of 10000, netting the $3.12m profit in one single transaction.”

“黑客利用它以創建一個新的頭寸，初始給定的Ethusd價格為100，然後立即以10000的Ethusd價格誇大了該職位，從而在一次交易中獲得了312萬美元的利潤。”

Chaofan Shou, co-founder of blockchain analytics firm Fuzzland, also weighed in, speculating the exploit was likely due to a price oracle issue.

區塊鏈分析公司Fuzzland的聯合創始人Chaofan Shou也稱讚，猜測漏洞可能是由於價格甲骨文問題。

“Anyone can change the Kilo’s price oracle. They did verify that the caller shall be a trusted forwarder, though, but didn’t verify the forwarded caller,” Shou said.

舒說：“任何人都可以更改千里的價格。

Shou added it was a “very simple vulnerability” when a user asked about the complexity of the exploit.

Shou補充說，當用戶詢問利用的複雜性時，這是一個“非常簡單的漏洞”。

The news has sent the KiloEX’s native token, Kilo, plunging over 27% to trade at $0.03596, according to CoinGecko. It’s still down over 78% from its all-time high of $0.1648, which it hit on March 27.

據Coingecko稱，這一消息已使Kiloex的原住民代幣（Kilo）跌落了27％以上的交易價格為0.03596美元。它的歷史最高高點仍然下降了78％以上，該高點在3月27日達到了0.1648美元。

KiloEx was established in 2023 and is backed by Binance Labs, which is a lead investor and strategic partner.

Kiloex成立於2023年，並得到了Binance Labs的支持，Binance Labs是主要投資者和戰略合作夥伴。

This exploit comes just days after the exchange announced a partnership with Dubai-based Web3 venture capitalist firm DWF Labs on April 13, which promised to expand KiloEx's market presence and accelerate growth.

該漏洞利用僅在交易所於4月13日與總部位於迪拜的Web3 Venture資本主義公司DWF Labs建立合作夥伴關係後幾天，該公司承諾將擴大Kiloex的市場業務並加速增長。

On March 25, DWF Labs launched a $250 million Liquid Fund to accelerate the growth of mid- and large-cap blockchain projects and drive real-world adoption of Web3 technologies.

3月25日，DWF實驗室推出了2.5億美元的流動基金，以加速中型和大型區塊鏈項目的增長，並推動對Web3技術的現實採用。