由於 ZK-Rollup 協定損失 500 萬美元，Loopring 遭受智慧錢包漏洞

以太坊 ZK-Rollup 協議路印協議 (Loopring) 於 6 月 9 日報告稱，其部分智慧錢包被利用，金額不詳。

Some Loopring smart wallets were exploited on June 9, with Blockchain security firm Cyvers Alert reporting that approximately 1,373 ETH, valued at $5 million, was stolen in the hack.

6 月 9 日，一些 Loopring 智慧錢包遭到利用，區塊鏈安全公司 Cyvers Alert 報告稱，大約 1,373 ETH（價值 500 萬美元）在此次駭客攻擊中被盜。

Following the news, Loopring’s LRC token dropped by approximately 4%, hitting a four-month low of $0.21, according to CryptoSlate’s data.

根據 CryptoSlate 的數據，在消息傳出後，Loopring 的 LRC 代幣下跌了約 4%，觸及 0.21 美元的四個月低點。

Loopring smart wallets are described by the firm as the “most secured wallets” on the Ethereum blockchain due to security measures in place designed to protect against asset theft.

Loopring 智慧錢包被該公司描述為以太坊區塊鏈上“最安全的錢包”，因為它採取了旨在防止資產被盜的安全措施。

However, the firm explained that its two-factor authentication service was compromised, allowing the malicious actor to initiate a recovery process, reset ownership, and withdraw assets. Loopring stated:

然而，該公司解釋說，其兩因素身份驗證服務遭到破壞，使得惡意行為者能夠啟動恢復過程、重置所有權並撤回資產。路印協議表示：

“The attack succeeded by compromising Loopring’s Two-Factor Authentication (2FA) service, allowing the hacker to impersonate the wallet owner and gain approval for the Recovery from the Official Guardian. Subsequently, the attacker transferred assets out of the affected wallets.”

「這次攻擊透過破壞路印協議的雙重認證（2FA）服務而成功，使駭客能夠冒充錢包所有者並獲得官方監護人的恢復批准。隨後，攻擊者將資產從受影響的錢包中轉移出來。

Meanwhile, Loopring said it was working with blockchain security firm SlowMist to determine how its 2FA service was compromised. The team has temporarily suspended Guardian and other 2FA-related operations. It added:

同時，Loopring 表示正在與區塊鏈安全公司 SlowMist 合作，以確定其 2FA 服務是如何受到損害的。團隊已暫時停止 Guardian 和其他 2FA 相關操作。它補充說：

“Loopring is working with law enforcement and professional security teams to track down the perpetrator. We will continue to provide updates as soon as the investigation progresses.”

「Loopring 正在與執法部門和專業安全團隊合作追查肇事者。一旦調查取得進展，我們將繼續提供最新情況。

This breach occurs as smart wallets are gaining traction in the Ethereum community.

這項漏洞發生之際，智慧錢包在以太坊社群中越來越受歡迎。

Over the past year, support for smart wallets has surged following the Ethereum Foundation’s ERC-4337 account abstraction going live on the Ethereum mainnet. This technology allows users to customize their digital asset management.

在過去的一年裡，隨著以太坊基金會的 ERC-4337 帳戶抽像在以太坊主網上上線，對智慧錢包的支持激增。該技術允許用戶自訂他們的數位資產管理。

Prominent figures like Vitalik Buterin and organizations like Coinbase have backed this technology, which is expected to be part of the upcoming Pectra hard fork.

Vitalik Buterin 等知名人士和 Coinbase 等組織都支援這項技術，預計該技術將成為即將推出的 Pectra 硬分叉的一部分。

However, decentralization advocate Chris Blec noted that the Loopring incident demonstrates that “smart wallets are not ready for prime-time,” advising users to “stick with properly-secured seed phrases for maximum safety and sovereignty.”

然而，去中心化倡導者 Chris Blec 指出，路印協議事件表明“智能錢包還沒有準備好迎接黃金時段”，建議用戶“堅持使用適當保護的種子短語，以獲得最大的安全性和主權。”

Similarly, Pratik Kala, Head of Research at Liquid Digital Assets, commented:

同樣，Liquid Digital Assets 研究主管 Pratik Kala 評論道：

“Smart wallets are the rave [at the moment] but new attack vectors come with new tech. We’ll get over it over time but be safe and use hardware wallets for [significant assets.]”

「智慧錢包（目前）很流行，但新科技也帶來了新的攻擊媒介。隨著時間的推移，我們會克服這個問題，但為了安全起見，請使用硬體錢包來儲存 [重要資產]。

Mentioned in this articleOluwapelumi AdejumoOluwapelumi values Bitcoin’s potential. He imparts insights on a range of topics like DeFi, hacks, mining and culture, underlining transformative power.Liam ‘Akiba’ WrightAlso known as “Akiba,” Liam is a reporter, editor and podcast producer at CryptoSlate. He believes that decentralized technology has the potential to make widespread positive change.

本文中提到 Oluwapelumi AdejumoOluwapelumi 非常重視比特幣的潛力。他就 DeFi、駭客、挖礦和文化等一系列主題發表見解，強調變革力量。他相信去中心化科技有潛力帶來廣泛的正面改變。