Loopring 智慧錢包被攻破

幾個小時前，一些路印協定智慧錢包遭遇安全漏洞。這次攻擊利用了只有一名監護人的錢包

DeFi platform Loopring suffered a $5 million hack targeting its "Ethereum’s most secure wallet" Guardian 2FA service.

DeFi 平台 Loopring 遭受了 500 萬美元的駭客攻擊，目標是其「以太坊最安全的錢包」Guardian 2FA 服務。

The attacker exploited a vulnerability to reset wallets with a single Guardian.

攻擊者利用一個漏洞透過單一監護人重置錢包。

Loopring is investigating with Mist Security & looking for the hacker. Loopring's token price dropped 5%.

Loopring 正在與 Mist Security 合作調查並尋找駭客。 Loopring的代幣價格下跌了5%。

Loopring, a decentralized finance (DeFi) protocol on Ethereum, has been hacked, resulting in a $5 million loss. The attack targeted Loopring’s ‘Guardian’ two-factor authentication (2FA) service, designed to enhance the security of its smart wallet, known as “Ethereum’s most secure wallet.”

以太坊上的去中心化金融 (DeFi) 協議路印協議 (Loopring) 遭到駭客攻擊，造成 500 萬美元損失。這次攻擊針對的是 Loopring 的「Guardian」雙重認證（2FA）服務，旨在增強其被稱為「以太坊最安全的錢包」的智慧錢包的安全性。

🚨Incident Alert: Loopring Smart Wallets Compromised🚨A few hours ago, some Loopring Smart Wallets were targeted in a security breach. The attack exploited wallets with only one Guardian, specifically the Loopring Official Guardian. The hacker initiated a Recovery process,… pic.twitter.com/Y9mYC4j9QJ

🚨事件警報：路印協定智慧錢包遭到入侵🚨幾個小時前，一些路印協定智慧錢包遭遇安全漏洞。這次攻擊利用了只有一名監護人的錢包，特別是路印協議官方監護人。駭客啟動了復原過程，… pic.twitter.com/Y9mYC4j9QJ

But how did hackers crack this supposedly impenetrable system? And what does it mean for your crypto holdings? Read on to find out…

但駭客是如何破解這個看似堅不可摧的系統的呢？這對您持有的加密貨幣意味著什麼？請仔細閱讀，找出答案…

Guardian 2FA Service Exploited

Guardian 2FA 服務被利用

The Guardian service allows customers with specific wallets to invite trusted wallets for security tasks, like freezing a compromised wallet or recovering it if the seed phrase is lost. However, a hacker exploited a vulnerability in Loopring’s Official Guardian service, performing unauthorized recoveries on wallets that used a single guardian. Wallets with multiple guardians or those using different types of guardians were not affected.

Guardian 服務允許擁有特定錢包的客戶邀請受信任的錢包執行安全任務，例如凍結受損的錢包或在種子短語丟失時恢復它。然而，駭客利用路印協議官方監護人服務中的漏洞，對使用單一監護人的錢包進行未經授權的恢復。具有多個監護人或使用不同類型監護人的錢包不受影響。

Scope of the Attack

攻擊範圍

Blockchain data analysis revealed that two wallets were involved in the breach, with one wallet being completely drained of about $5 million in tokens.

區塊鏈數據分析顯示，有兩個錢包參與了洩露，其中一個錢包的約 500 萬美元代幣被完全耗盡。

Jumping Into Action

立即行動

In response, Loopring announced on social media platform X that it is working with Mist Security to identify the vulnerability in the 2FA service. To protect users, Loopring has temporarily suspended all Guardian and 2FA functions, preventing further unauthorized access.

對此，Loopring 在社群媒體平台 X 上宣布，正在與 Mist Security 合作識別 2FA 服務的漏洞。為了保護用戶，路印協議暫時中止了所有Guardian和2FA功能，防止進一步的未經授權的存取。

Edit + update:We are working with @SlowMist_Team and some other security experts and authorities to continue to investigate this incident.

編輯+更新：我們正在與@SlowMist_Team以及其他一些安全專家和權威機構合作，繼續調查此事件。

We will update the community here as soon as we have more information to share. Security and user protection remain our top priorities.

一旦我們有更多資訊可供分享，我們將立即在此處更新社區。安全和用戶保護仍然是我們的首要任務。

How Will the Markets React?

市場將如何反應？

Loopring is actively trying to identify the hacker and has requested the community’s help in providing any relevant information. Since the breach was disclosed, Loopring’s native token, LRC, has dropped by about 5% in the last day, currently trading at $0.2171, reflecting the market’s reaction to the incident.

路印協議正在積極嘗試識別駭客身份，並請求社區幫助提供任何相關資訊。自從洩漏事件被披露以來，Loopring 的原生代幣 LRC 在最後一天下跌了約 5%，目前交易價格為 0.2171 美元，反映了市場對該事件的反應。

This incident highlights the ongoing challenges in securing decentralized finance platforms and underscores the need for strong, multi-layered security measures.

這事件凸顯了保護去中心化金融平台所面臨的持續挑戰，並強調需要採取強而有力的多層安全措施。

Feeling nervous about your crypto holdings? Learn more about crypto security here: A Comprehensive Guide to Keeping Your Crypto Safe

對您持有的加密貨幣感到緊張嗎？在此處了解有關加密安全的更多資訊：保持加密安全的綜合指南