Solareum 在安全漏洞後關閉，用戶資金損失

在發生與基於 Solana 的錢包耗盡漏洞相關的安全漏洞後，Solareum Telegram 交易應用程式已宣布關閉。該漏洞預計影響了超過 300 名 Solana 用戶，消耗了價值約 523,000 美元的 SOL，在該團隊承認潛在漏洞後，該漏洞已與 Solareum 相關聯。儘管 Solareum 計劃聯繫當局凍結任何被盜的加密資產，但該專案的 Telegram 頻道充斥著要求答案的要求和因用戶尋求賠償而威脅採取法律行動的資訊。

Solareum Announces Closure Following Security Breach, User Funds Compromised

Solareum 因安全漏洞、用戶資金受損而宣布關閉

Background:

背景：

Solareum, a Telegram-based trading app for Solana tokens, has announced its closure after a security breach resulted in the theft of approximately $523,000 worth of SOL from user wallets. The exploit, which affected over 300 Solana users, raised suspicions about the involvement of the popular Telegram trading bot, BONKbot.

Solareum 是一款基於 Telegram 的 Solana 代幣交易應用程序，在安全漏洞導致用戶錢包中價值約 523,000 美元的 SOL 被盜後，該應用程式宣布關閉。這個漏洞影響了 300 多名 Solana 用戶，引發了人們對流行 Telegram 交易機器人 BONKbot 參與其中的懷疑。

Initial Suspicions and BONKbot's Denial:

最初的懷疑和 BONKbot 的否認：

Initially, the BONKbot team denied responsibility for the security lapse, stating that users impacted by the exploit had previously exported their private keys to other applications. This led to questions about the source of the vulnerability.

最初，BONKbot 團隊否認對安全漏洞負責，並表示受漏洞影響的用戶先前曾將其私鑰匯出到其他應用程式。這引發了有關漏洞來源的疑問。

Solareum's Admission and Subsequent Closure:

Solareum 的入場和隨後關閉：

In response to the increasing speculation, Solareum acknowledged the possibility of an exploit on Friday through a tweet. Subsequently, on Saturday, the team announced the closure of the Solareum project in a Telegram message, citing a combination of insufficient funds, evolving market trends, and the recent security breach as factors in their decision.

為了回應日益增加的猜測，Solareum 週五透過推文承認了利用的可能性。隨後，週六，該團隊在 Telegram 訊息中宣布關閉 Solareum 項目，理由是資金不足、不斷變化的市場趨勢以及最近的安全漏洞是他們做出決定的因素。

Impact and Reaction:

影響和反應：

The incident has caused considerable concern among users, with many demanding answers and threatening legal action if Solareum does not announce plans for compensation. Solareum's Telegram channel has become a hub for frustrated users seeking clarity.

該事件引起了用戶的極大關注，許多人要求得到答案，並威脅如果 Solareum 不公佈賠償計劃，將採取法律行動。 Solareum 的 Telegram 頻道已成為沮喪的用戶尋求澄清的中心。

BONKbot's Analysis and Implication of Solareum:

BONKbot對Solareum的分析與啟示：

BONKbot, with over 270,000 users, was initially suspected as the source of the exploit. The team, however, released data indicating that the vulnerability was likely tied to a specific application where users had imported their private keys. On Monday, BONKbot confirmed to Decrypt that their analysis pointed to Solareum as the potential source of the breach.

BONKbot 擁有超過 27 萬名用戶，最初被懷疑是漏洞的來源。然而，該團隊發布的數據表明，該漏洞可能與用戶匯入私鑰的特定應用程式有關。週一，BONKbot 向 Decrypt 證實，他們的分析表明 Solareum 是這次洩漏的潛在來源。

Uncertainties and Lack of Clarity:

不確定性和缺乏清晰度：

The precise nature of the exploit remains unclear, with BONKbot's team noting that their analysis was probabilistic rather than deterministic due to the lack of access to Solareum's codebase or logs. They further emphasized that it was still undetermined whether the breach was external or an internal drain.

漏洞的確切性質仍不清楚，BONKbot 團隊指出，由於無法存取 Solareum 的程式碼庫或日誌，他們的分析是機率性的，而不是確定性的。他們進一步強調，目前還不確定洩漏是外部洩漏還是內部洩漏。

Solareum's Response and Lack of Compensation Plan:

Solareum 的回應和缺乏補償計劃：

Solareum has stated that they will contact authorities in an attempt to freeze any stolen crypto assets if they are transferred to centralized exchanges. However, the team has not provided any information regarding compensation for affected users. Despite multiple attempts by Decrypt for comment, Solareum has not yet responded.

Solareum 表示，如果任何被盜的加密資產被轉移到中心化交易所，他們將聯繫當局，試圖凍結這些資產。不過，該團隊尚未提供有關對受影響用戶進行賠償的任何資訊。儘管 Decrypt 多次嘗試置評，但 Solareum 尚未回應。

Conclusion:

結論：

Solareum's closure and the ongoing investigation into the security breach have raised questions about the safety and reliability of Telegram-based trading platforms. The incident highlights the importance of robust security measures and the need for greater transparency and accountability within the cryptocurrency ecosystem. As the investigation continues, it remains unclear whether users who lost funds will receive any compensation.

Solareum 的關閉以及對安全漏洞的持續調查引發了人們對基於 Telegram 的交易平台的安全性和可靠性的質疑。這事件凸顯了強有力的安全措施的重要性以及加密貨幣生態系統內提高透明度和問責制的必要性。隨著調查的繼續，目前尚不清楚損失資金的用戶是否會獲得任何賠償。