Stablecoin支付公司Infini損失了5000萬美元的利用，承諾全額賠償

據信，肇事者曾在Infini項目進行合同製定項目中工作，但在該項目完成後秘密保留管理權

Stablecoin payment firm Infini has lost nearly $50 million in an exploit that was conducted by a developer who retained administrative privileges after project delivery, according to security firm Cyvers.

據安全公司Cyvers稱，Stablecoin支付公司Infini在項目交付後保留行政特權的開發商進行了近5000萬美元的利用。

The attacker funded the wallet used in the hack with 1 Ether (ETH) from the cryptocurrency mixing service Tornado Cash and went on to transfer $49.52 million in USD Coin (USDC) from Infini through a contract they created in November 2024.

攻擊者資助了黑客中使用的錢包，並從加密貨幣混合服務龍捲風現金中提供了1醚（ETH），然後通過2024年11月的合同從Infini轉移了4,952萬美元的USD Coin（USDC）。

The USDC was immediately swapped for Dai (DAI), a stablecoin that doesn’t have a freeze function. The funds were then converted to 17,696 ETH and moved into a secondary address at the time of writing.

USDC立即被換成Dai（Dai），這是一種沒有凍結功能的穩定幣。然後將資金轉換為17,696 ETH，並在撰寫本文時轉化為次要地址。

The Infini team did not pause withdrawals, and founder Christian Li claimed in an X post that full compensation would be paid in a worst-case scenario.

Infini團隊沒有停下戒菸，創始人克里斯蒂安·李（Christian Li）在X帖子中聲稱，在最壞的情況下將支付全部賠償。

The platform has observed $500,000 in withdrawals since the theft, according to Li.

據李說，自盜竊以來，該平台已經觀察到了500,000美元的提款。

In a now-deleted tweet, Infini team member “Christine” stated that the engineer responsible for the theft had been identified and reported to the police.

在一條現已刪除的推文中，英菲尼團隊成員“克里斯汀”表示，已確定了負責盜竊的工程師並向警方報告。

However, when asked by Cointelegraph to confirm the information, she said: “We are still investigating.”

但是，當Cointelegraph要求確認信息時，她說：“我們仍在調查。”

The attack on Infini follows a record-breaking hack on cryptocurrency exchange Bybit, which lost $1.4 billion in Ether and related tokens on Feb. 21.

Infini的襲擊是在加密貨幣交易所Bybit上的創紀錄的黑客攻擊之後，2月21日在以太幣和相關令牌中損失了14億美元。

The large-scale attack on a major exchange raised concerns about possible insolvency at the time. However, the exchange opted for a rare strategy of keeping withdrawals open and vowed to cover the loss if funds could not be recovered.

對重大交流的大規模攻擊引起了人們對當時可能破產的擔憂。但是，該交易所選擇了一種罕見的策略，即如果無法收回資金，則誓言要保持撤離並發誓要彌補損失。

Bybit relied on loans from partners and rival exchanges to meet the immediate liquidity demands of customer withdrawals, which totaled over $5 billion, according to DefiLlama data.

根據Defillama的數據，Bybit依靠合作夥伴和競爭對手交流的貸款來滿足客戶提款的直接流動性需求，總計超過50億美元。

On Feb. 24, Bybit CEO Ben Zhou announced that the exchange had fully closed its Ether gap.

2月24日，拜比特首席執行官本周宣布該交易所完全封閉了其以太差距。

Onchain detective ZachXBT identified North Korea’s state-sponsored hacking group Lazarus as a prime suspect in the attack on Bybit.

Onchain偵探Zachxbt將朝鮮贊助的黑客黑客組織拉撒路（Lazarus）確定為對拜比特（Bybit）襲擊的主要嫌疑人。

ZachXBT linked the Bybit hacker’s wallet to an attack carried out on Phemex in January, as well as to the attack against BingX, both of which have been attributed to North Korea.

Zachxbt將Bybit Hacker的錢包與一月份在Phemex進行的襲擊以及對Bingx的襲擊聯繫起來，這兩者都歸因於朝鮮。