Sonne Finance 代幣在 Optimism 區塊鏈遭受 2000 萬美元駭客攻擊後暴跌 60%

在 Optimism 區塊鏈遭受 2000 萬美元的攻擊後，Sonne Finance 的 SONNE 代幣暴跌 60% 至 2.5 美分。該漏洞涉及操縱市場的「捐贈」攻擊​​，是在為 Velodrome Finance 的 VELO 添加代幣市場後執行的。然而，Sonne 市場的 Base 區塊鏈版本並未受到影響。

Sonne Finance Token Plummets 60% After Devastating $20 Million Hack on Optimism Blockchain

Optimism 區塊鏈遭駭客攻擊造成 2,000 萬美元損失後，Sonne Finance 代幣暴跌 60%

May 15, 2024

2024 年 5 月 15 日

Sonne Finance, a decentralized lending platform, has suffered a severe cyberattack on its Optimism blockchain-based version, leading to the theft of an estimated $20 million in cryptocurrency assets. The incident, which was discovered early Wednesday morning, has sent shockwaves through the cryptocurrency community and resulted in a significant drop in the value of Sonne's native token, SONNE.

Sonne Finance 是一個去中心化借貸平台，其基於 Optimism 區塊鏈的版本遭受了嚴重的網路攻擊，導致約 2000 萬美元的加密貨幣資產被盜。該事件於週三凌晨被發現，在加密貨幣社群引起了軒然大波，並導致 Sonne 的原生代幣 SONNE 的價值大幅下跌。

Manipulation through "Donation" Attack

透過「捐贈」攻擊​​進行操縱

The cyberattackers exploited a vulnerability in Sonne Finance's platform to execute a "donation" attack, which allowed them to manipulate the exchange rate between certain tokens on the platform. By donating large amounts of cryptocurrency to specific markets, the attackers tricked the platform into believing it had more collateral than was actually available. This enabled them to withdraw millions of dollars worth of cryptocurrency, including VELO, ether, and USD Coin (USDC).

網路攻擊者利用 Sonne Finance 平台的漏洞執行「捐贈」攻擊​​，從而操縱平台上某些代幣之間的匯率。透過向特定市場捐贈大量加密貨幣，攻擊者欺騙該平台，使其相信其擁有的抵押品多於實際可用的抵押品。這使他們能夠提取價值數百萬美元的加密貨幣，包括 VELO、以太幣和美元硬幣 (USDC)。

Exploit Utilized Timelock Mechanism

利用時間鎖定機制

The exploit was made possible by the platform's two-day timelock mechanism, which is a smart contract that delays transaction execution by a predetermined period. The attackers reportedly exploited this mechanism to execute four transactions that created markets and adjusted collateral factors, setting the stage for their subsequent manipulation of the exchange rates.

該漏洞是透過平台的兩天時間鎖定機制實現的，該機制是一種智能合約，可將交易執行延遲預定時間。據報道，攻擊者利用這一機制執行了四筆交易，這些交易創造了市場並調整了抵押品因素，為他們隨後操縱匯率奠定了基礎。

Base Blockchain Version Unaffected

基礎區塊鏈版本不受影響

It is important to note that the hack only affected Sonne Finance's platform on the Optimism blockchain. The Base blockchain version of the platform was not impacted by the attack, as it operates independently with its own set of security measures. This highlights the potential vulnerabilities that can arise when deploying decentralized applications across multiple blockchain networks.

值得注意的是，這次駭客攻擊僅影響了 Optimism 區塊鏈上的 Sonne Finance 平台。該平台的基礎區塊鏈版本沒有受到攻擊的影響，因為它有自己的一套安全措施獨立運作。這凸顯了跨多個區塊鏈網路部署去中心化應用程式時可能出現的潛在漏洞。

Sonne's Response and Recovery Efforts

Sonne 的應對與恢復努力

Upon discovering the attack, Sonne Finance's developers acted swiftly to pause operations and mitigate further damage. They successfully prevented the theft of an additional $6.5 million worth of assets that had been compromised but not yet withdrawn. The developers have also launched an investigation into the incident and are working to retrieve the stolen funds.

發現攻擊後，Sonne Finance 的開發人員迅速採取行動，暫停營運並減輕進一步的損失。他們成功阻止了另外價值 650 萬美元的資產被盜，這些資產已被洩露但尚未撤回。開發商也已對此事件展開調查，並正努力追回被竊資金。

SONNE Token Value Plummets

SONNE 代幣價值暴跌

The news of the hack has had a significant impact on the value of Sonne Finance's SONNE token, which plummeted by 60% to 2.5 cents shortly after the announcement. This decline wiped out over $20 million in market capitalization, emphasizing the fragility of decentralized finance protocols in the face of cyberattacks.

駭客攻擊的消息對 Sonne Finance 的 SONNE 代幣價值產生了重大影響，在消息公佈後不久，SONNE 代幣暴跌 60% 至 2.5 美分。這一下跌導致市值蒸發了超過 2000 萬美元，凸顯了去中心化金融協議在網路攻擊面前的脆弱性。

Industry Impact and Implications

產業影響和影響

The Sonne Finance hack serves as a stark reminder of the constant cybersecurity risks associated with decentralized finance applications. It highlights the need for robust security measures, rigorous audits, and continuous monitoring to protect user funds and maintain trust within the ecosystem.

Sonne Finance 駭客事件清楚提醒人們，與去中心化金融應用程式相關的持續網路安全風險。它強調需要採取強有力的安全措施、嚴格的審計和持續監控來保護用戶資金並維持生態系統內的信任。

As the cryptocurrency industry continues to evolve and mature, it is imperative for developers and users alike to remain vigilant against potential security threats. The ongoing development of secure and reliable blockchain protocols, along with robust cybersecurity practices, will be crucial in fostering long-term confidence and adoption of decentralized financial services.

隨著加密貨幣產業的不斷發展和成熟，開發人員和使用者都必須對潛在的安全威脅保持警惕。安全可靠的區塊鏈協議的持續開發以及強大的網路安全實踐對於培養長期信心和去中心化金融服務的採用至關重要。