bybit hack之後的無加密攻擊的最新受害者

報導表明，Infini賺取的資金今天被盜了，資金從Morpho Mevcapital常規USDC保管庫中排出。

Stablecoin-based neobank Infini has become the latest victim of a crypto attack, with nearly $49.5 million in funds being stolen.

總部位於Stablecoin的Neobank Infini已成為加密貨幣襲擊的最新受害者，將近4,950萬美元的資金被盜。

According to reports, Infini Earn Funds were stolen on Friday, with funds being drained from the Morpho MEVCapital Usual USDC Vault. The attacker made off with two separate amounts: 11,455,666 USDC and 38,060,996 USDC.

據報導，Infini賺錢的資金在周五被盜，資金從Morpho Mevcapital常規USDC保管庫中排出。攻擊者以兩個單獨的金額銷售：11,455,666 USDC和38,060,996 USDC。

The attack appears to have been facilitated by a leaked private key. According to CertiK Alert, a suspicious fund transfer was flagged from an unverified contract. The transfer address was identified as 0x9A79f4105A4e1A050Ba0b42F25351D394fA7E1DC, and the recipient address, 0x3ac96134fb0e42a52d33045aee50b89790f05ed0, received the stolen funds. These funds, totaling $49.5 million, are currently being converted into DAI.

攻擊似乎是由洩漏的私鑰促進的。根據Certik Alert的說法，可疑基金轉移是通過未驗證的合同標記的。轉移地址被確定為0x9A79F4105A4E1A0BA0B42F25351D394FA7E1DC，收件人地址為0x3AC96134FB0E42A52A52D33045AEEE 45AEE EEE 45AEE5AEE5AEE5AEE5AEE5AEE5AEE5AEE5AEE5AEE5AEE5AEEB8979790F055EDED0。這些資金總計4,950萬美元，目前正在轉換為DAI。

Furthermore, latest investigation revealed that the compromised account, 0xc49b5e5b9da66b9126c1a62e9761e6b2147de3e1, had been granted a special role (‘0x8e9b’) that enabled the withdrawal of all funds from the address 0x9A79. The attacker, identified as 0x3ac9, has exchanged the stolen assets for 17,696 ETH, which is valued at nearly $49.5 million.

此外，最新調查顯示，該折衷的帳戶是0xc49b5e5b9da66b9126c1a62e9761e9761e9761E6B2147DE3E1，已被授予特殊角色（'0x8e9b'），從而使所有資金從地址撤回了所有地址0x9Aa79。攻擊者被確定為0x3AC9，已將被盜資產交換為17,696 ETH，價值接近4950萬美元。

Infini, which operates as a stablecoin digital bank, quickly responded to the attack. Co-founder Christine assured the public that full compensation would be provided, saying, “Don’t worry, we will pay in full. The engineer involved has been located and controlled. The case has been reported. Infini will be fine. I will keep you updated on the progress as soon as possible.”

Infini作為Stablecoin數字銀行運作，很快就對這次襲擊做出了回應。聯合創始人克里斯汀（Christine）向公眾保證，將提供全部賠償，說：“不用擔心，我們將全額付款。涉及的工程師已被定位和控制。該案已報告。 Infini會沒事的。我會盡快讓您更新進度。”

Yu Xian, founder of blockchain security firm SlowMist, also confirmed that his team was actively investigating the theft, describing the attacker as ’a very technical person.’

區塊鏈安全公司Slowmist的創始人Yu Xian還證實，他的團隊正在積極調查盜竊案，稱攻擊者為“非常技術人員”。

In a statement, Infini’s co-founder Christian added, “We are still sorting out and tracking the details. Withdrawals are normal. In the worst case, full compensation will be paid, so you can rest assured.” He further explained, “A friend once joked that I had been having too smooth sailing along the way. I said I was always prepared for the first disaster, but I didn’t expect it to happen so soon after Bybit.”

Infini的聯合創始人克里斯蒂安（Christian）在一份聲明中補充說：“我們仍在整理和跟踪細節。提取是正常的。在最壞的情況下，將支付全額賠償，因此您可以放心。”他進一步解釋說：“一個朋友曾經開玩笑說我一路走來太光滑。我說我一直為第一次災難做好準備，但我沒想到它會在拜比特之後很快發生。”

Christian emphasized that his personal private key had not been compromised, attributing the attack to negligence during the transfer of authority. He took responsibility for the breach, stating, “It is ultimately my fault, and this has sounded the alarm.”

克里斯蒂安（Christian）強調，他的個人私鑰沒有受到損害，將攻擊歸因於權威轉移期間的疏忽。他對違規行為負責，並說：“這最終是我的錯，這聽起來很警報。”

He reassured customers, “There is no problem with liquidity. Full compensation will be paid, and the funds are being traced. I’m sorry for the worry caused to those who trusted us. Rebuilding trust will be difficult, but we won’t give up.”

他向客戶保證：“流動性沒有問題。將支付全額賠償，並追溯到資金。對那些信任我們的人造成的擔心，我感到抱歉。重建信任會很困難，但我們不會放棄。”