bitcoin
bitcoin

$98382.31 USD 

-0.28%

ethereum
ethereum

$3425.95 USD 

2.43%

tether
tether

$1.00 USD 

-0.01%

solana
solana

$256.65 USD 

-0.66%

bnb
bnb

$669.42 USD 

1.01%

xrp
xrp

$1.47 USD 

-4.97%

dogecoin
dogecoin

$0.437732 USD 

-4.86%

usd-coin
usd-coin

$0.999973 USD 

0.00%

cardano
cardano

$1.07 USD 

-2.08%

tron
tron

$0.216465 USD 

3.60%

stellar
stellar

$0.587689 USD 

33.74%

avalanche
avalanche

$42.28 USD 

-1.56%

toncoin
toncoin

$6.44 USD 

14.23%

shiba-inu
shiba-inu

$0.000027 USD 

0.39%

polkadot-new
polkadot-new

$9.12 USD 

20.56%

加密貨幣新聞文章

以太坊的完整性受到損害:2500 萬美元的搶劫敲響了警鐘

2024/05/16 19:00

在兩兄弟因利用網路漏洞並從交易驗證器竊取 2500 萬美元而被捕後,以太坊的可靠性受到質疑。這一事件涉及操縱網路驗證交易的過程,引發了人們對區塊鏈完整性以及驗證者濫用「最大可提取價值」(MEV)機制從交易重新排序中獲利的可能性的擔憂。這次逮捕凸顯了對「加密」行業正在進行的監管審查以及採取強有力的安全措施來保護區塊鏈網路的必要性。

以太坊的完整性受到損害:2500 萬美元的搶劫敲響了警鐘

Ethereum's Fragility Exposed: $25 Million Heist Raises Concerns over Network Integrity

以太坊脆弱性暴露:2500萬美元被盜引發對網路完整性的擔憂

Amidst the cryptocurrency market's tumultuous journey, Ethereum's foundation has been rattled by a brazen heist that has compromised the network's very integrity. The arrest of two brothers, Anton and James Peraire-Bueno, has unveiled a chilling exploitation that has drained $25 million from unsuspecting transaction validators.

在加密貨幣市場的動盪歷程中,以太坊的基礎因一場明目張膽的搶劫而動搖,損害了網路的完整性。安東·佩雷爾-布埃諾(Anton Peraire-Bueno) 和詹姆斯·佩雷爾-布埃諾(James Peraire-Bueno) 兩兄弟的被捕揭露了一項令人毛骨悚然的漏洞利用行為,該漏洞已從毫無戒心的交易驗證器中盜取了2500 萬美元。

Conspiracy Unraveled: Brothers Target Ethereum's Blindspots

陰謀敗露:兄弟瞄準以太坊的盲點

The U.S. Department of Justice (DOJ) has charged the MIT-educated duo with a sophisticated scheme that exploited vulnerabilities in Ethereum's transaction verification process. By manipulating the so-called 'maximal extractable value' (MEV) mechanism, which allows validators to profit from knowledge of pending transactions, the brothers executed a daring heist that has shaken the confidence of the cryptocurrency community.

美國司法部 (DOJ) 指控這對受過麻省理工學院教育的二人實施了一項複雜的計劃,該計劃利用了以太坊交易驗證過程中的漏洞。透過操縱所謂的「最大可提取價值」(MEV)機制,該機制允許驗證者從待處理交易的知識中獲利,兄弟倆執行了一次大膽的搶劫,動搖了加密貨幣社區的信心。

MEV: A Double-Edged Sword

MEV:一把雙面刃

MEV, a controversial feature of Ethereum, enables validators to preview and reorder pending transactions, providing them with an advantage to profit from large trades. However, it has come under fire from European regulators, who have raised concerns over its potential for market manipulation.

MEV 是以太坊的一個有爭議的功能,它使驗證者能夠預覽和重新排序待處理的交易,為他們提供從大額交易中獲利的優勢。然而,它受到了歐洲監管機構的批評,他們對其潛在的市場操縱行為表示擔憂。

Exploiting the Relay's Vulnerability

利用中繼的漏洞

The Peraire-Bueno brothers took advantage of a vulnerability in the MEV-Boost relay code, which prematurely exposed the full contents of proposed blocks to validators. This allowed them to tamper with the victims' proposed blocks, replacing highly profitable transactions with their own.

Peraire-Bueno 兄弟利用 MEV-Boost 中繼程式碼中的漏洞,過早地將提議區塊的全部內容暴露給驗證者。這使得他們能夠篡改受害者提出的區塊,並用自己的交易取代高利潤的交易。

Victims' Funds Vanish

受害者的資金消失

In a cruel twist of fate, the brothers replaced the victims' 'buy' transactions with 'sell' transactions, effectively draining the liquidity pools of the very cryptocurrencies the victims had just purchased. The victims' own 'sell' orders were rendered useless, leaving them with worthless assets while the brothers pocketed the ill-gotten gains.

在命運的殘酷扭曲中,兄弟倆用「出售」交易取代了受害者的「購買」交易,有效地耗盡了受害者剛購買的加密貨幣的流動性池。受害者自己的「出售」指令變得毫無用處,讓他們擁有毫無價值的資產,而兄弟倆則將不義之財收入囊中。

OpSec Blunders: Google's Unintentional Ally

OpSec 失誤:Google 無意中的盟友

Despite their academic pedigree, the brothers' operational security (OpSec) measures proved amateurish. Their pre-heist internet searches for "money laundering" and "extradition" provided valuable clues to law enforcement.

儘管他們有著學術出身,但兄弟倆的營運安全 (OpSec) 措施卻被證明是業餘的。他們在搶劫前透過網路搜尋“洗錢”和“引渡”,為執法部門提供了寶貴的線索。

Law Enforcement Triumphs: DOJ and IRS Team Up

執法勝利:司法部和國稅局聯手

Deputy Attorney General Lisa Monaco lauded the efforts of DOJ prosecutors and Internal Revenue Service (IRS) agents, who relentlessly pursued the case, unraveling the complex web of wire fraud and money laundering involved. The IRS's use of "cutting-edge technology and good-ole-fashioned investigative work" proved invaluable in tracking the stolen funds.

司法部副部長麗莎·莫納科(Lisa Monaco) 對司法部檢察官和國稅局(IRS) 特工的努力表示讚賞,他們堅持不懈地追查此案,揭開了涉及的電匯欺詐和洗錢的複雜網路。事實證明,美國國稅局使用「尖端技術和老式調查工作」在追蹤被盜資金方面發揮了無價的作用。

Ethereum's Blemished Reputation: Proof-of-Stake Triggering Regulatory Backlash

以太坊聲譽受損:權益證明引發監管反彈

The heist has further damaged Ethereum's reputation, which has taken a hit since its transition from a proof-of-work to a proof-of-stake consensus mechanism. The shift towards proof-of-stake has been identified as a contributing factor to the U.S. Securities and Exchange Commission's (SEC) rumored designation of ETH as an unregistered security.

這次竊盜事件進一步損害了以太坊的聲譽,自從其從工作量證明機制過渡到權益證明共識機制以來,以太坊的聲譽受到了打擊。向權益證明的轉變被認為是美國證券交易委員會 (SEC) 傳聞將 ETH 指定為未註冊證券的促成因素。

Institutional Investor Targeted: BlockTower's $20 Million Loss

機構投資者瞄準:BlockTower 損失 2000 萬美元

The cryptocurrency industry has witnessed another blow with the hacking of BlockTower, an institutional investment firm specializing in blockchain investments. The company's main hedge fund has reportedly suffered a substantial loss, although the exact amount and nature of the hack remain undisclosed. BlockTower's prior history of vulnerabilities and investment decisions in struggling crypto entities have raised questions about its due diligence practices.

專門從事區塊鏈投資的機構投資公司BlockTower遭遇駭客攻擊,加密貨幣產業再次受到打擊。據報道,該公司的主要對沖基金遭受了重大損失,但駭客攻擊的具體金額和性質尚未披露。 BlockTower 先前在陷入困境的加密實體中的漏洞和投資決策的歷史引發了對其盡職調查實踐的質疑。

Sonne Finance's $20 Million Mishap

Sonne Finance 的 2000 萬美元事故

The spate of hacks continued with Sonne Finance, a decentralized non-custodial lending protocol, losing $20 million in wrapped ETH and USDC tokens. Despite offering a bug bounty to the hacker, the stolen assets have already been swapped for other cryptocurrencies, potentially obscuring their trail.

Sonne Finance(一種去中心化非託管借貸協議)繼續遭受大量駭客攻擊,導致 ETH 和 USDC 代幣損失 2000 萬美元。儘管向駭客提供了漏洞賞金,但被盜資產已經被替換為其他加密貨幣,這可能會掩蓋他們的蹤跡。

Tornado Cash: A Haven for Ill-Gotten Gains

龍捲風現金:不義之財的避風港

The Ethereum-based coin mixer Tornado Cash has become a notorious destination for stolen cryptocurrencies. A United Nations Security Council (UNSC) report has linked Tornado Cash to the laundering of over $200 million in stolen ETH, including funds originating from North Korean hackers.

基於以太坊的混幣器 Tornado Cash 已成為被盜加密貨幣的臭名昭著的目的地。聯合國安理會 (UNSC) 的一份報告將 Tornado Cash 與價值超過 2 億美元的被盜 ETH 的洗錢活動聯繫起來,其中包括來自北韓駭客的資金。

North Korea: A Persistent Cyber Threat

北韓:持續的網路威脅

The UNSC report also implicates North Korea in a series of attacks on cryptocurrency firms, netting the rogue state over $3.6 billion since 2017. The report suggests North Korea's continued involvement in cryptocurrency heists, highlighting the risks associated with operating in this unregulated space.

聯合國安理會的報告還暗示北韓參與了一系列針對加密貨幣公司的攻擊,自2017 年以來,該流氓國家已淨賺了超過36 億美元。不受監管的領域開展業務的相關風險。

Tornado Cash Co-Founder Imprisoned: A Hollow Victory

Tornado Cash 聯合創始人入獄:一場空洞的勝利

The irony is palpable as many victims of these heists have been among the vocal critics of Tornado Cash co-founder Alexey Pertsev's recent sentencing to 64 months in prison for money laundering. While the legal system punishes one actor, the broader issue of rampant cryptocurrency theft remains unchecked.

諷刺的是,這些搶劫案的許多受害者都是 Tornado Cash 聯合創始人 Alexey Pertsev 最近因洗錢罪被判處 64 個月監禁的直言不諱的批評者。儘管法律制度會懲罰一名行為者,但猖獗的加密貨幣盜竊這一更廣泛的問題仍未得到遏制。

Teranode: A Glimmer of Hope Amidst the Turmoil

Teranode:動盪中的一線希望

As the cryptocurrency industry grapples with these setbacks, there are pockets of innovation and resilience. Teranode's edge-to-edge electronic value system offers a blueprint for a more secure and transparent financial infrastructure.

當加密貨幣產業努力應對這些挫折時,也出現了一些創新和彈性。 Teranode 的邊緣到邊緣電子價值系統為更安全、更透明的金融基礎設施提供了藍圖。

Conclusion: A Call for Accountability and Regulatory Oversight

結論:呼籲問責和監管

The recent hacks and exploits have underscored the urgent need for accountability and regulatory oversight in the cryptocurrency industry. While the technology holds immense promise, it cannot unleash its full potential without addressing the glaring vulnerabilities and fraudulent practices that have plagued the sector. The Ethereum heist and other incidents should serve as a wake-up call, demanding a collective effort to safeguard user funds and ensure that the cryptocurrency ecosystem is built on principles of integrity and justice.

最近的駭客攻擊和漏洞凸顯了加密貨幣產業迫切需要問責和監管。儘管該技術前景廣闊,但如果不解決困擾該行業的明顯漏洞和詐欺行為,它就無法充分發揮其潛力。以太坊搶劫案和其他事件應該敲響警鐘,要求大家共同努力保護用戶資金,並確保加密貨幣生態系統建立在誠信和正義的原則之上。

免責聲明:info@kdj.com

所提供的資訊並非交易建議。 kDJ.com對任何基於本文提供的資訊進行的投資不承擔任何責任。加密貨幣波動性較大,建議您充分研究後謹慎投資!

如果您認為本網站使用的內容侵犯了您的版權,請立即聯絡我們(info@kdj.com),我們將及時刪除。

2024年11月24日 其他文章發表於