駭客竊取 170 萬美元後 XT Exchange 停止提款

總部位於塞席爾的加密貨幣交易所 XT Exchange 已停止提款，該交易所日交易量超過 3.15 億美元。

Seychelles-based crypto exchange XT Exchange has halted withdrawals after being attacked by hackers who stole $1.7 million, according to blockchain security firm PeckShield.

據區塊鏈安全公司 PeckShield 稱，總部位於塞席爾的加密貨幣交易所 XT Exchange 在遭受駭客攻擊並竊取 170 萬美元後已停止提款。

The breach was first reported by PeckShield, who noted that unauthorized transactions originated from XT’s wallet structure.

PeckShield 首先報告了這起洩漏事件，他指出未經授權的交易源自 XT 的錢包結構。

According to updates, the attacker quickly liquidated the stolen resources, sending 461.58 ETH to a wallet with the address “0xB43f.”

根據最新消息，攻擊者很快就清算了被盜資源，將 461.58 ETH 發送至地址為「0xB43f」的錢包。

The community vigilance was also instrumental since immediately blockchain enthusiasts pointed at potential issues.

社群的警覺性也很有幫助，因為區塊鏈愛好者立即指出了潛在的問題。

XT Exchange Reacts: Assurances Amid UncertaintyIn an effort to contain the situation, XT Exchange acknowledged the breach. They assured users that their funds weren’t compromised.

XT Exchange 的反應：不確定性中的保證為了控制局勢，XT Exchange 承認了這次違規行為。他們向用戶保證他們的資金沒有受到損害。

The platform highlighted its reserve assets are 1.5 times higher than the users’ deposit to prove the company’s solvency to the attacks.

該平台強調其儲備資產比用戶存款高1.5倍，以證明該公司對攻擊的償付能力。

XT declared the plan to deploy the Merkle Tree Asset Proof System in December, 2024. This system seeks to increase transparency through an independent way in which the users will be able to confirm the stated reserves, a move that comes as the sector increases the calls for accountability.

XT 於 2024 年 12 月宣布計劃部署 Merkle Tree 資產證明系統。

Being one of the leading companies operating in the cryptocurrency market, spot trading volume daily at XT Exchange is over $3.15 billion.

作為加密貨幣市場的領導公司之一，XT Exchange 每日現貨交易量超過 31.5 億美元。

The issue is that XTs initial public statement demonstrates an organization level of preparedness, however the breach illustrates the current difficulties that centralized exchange faces when it comes down to protecting platforms from advanced attackers.

問題在於，XT 的首次公開聲明表明了組織層面的準備工作，但這次違規事件說明了中心化交易所目前在保護平台免受高級攻擊者攻擊方面面臨的困難。

This is a wake-up call for not only exchanges but users as well of the necessity of surveillance when dealing in the crypto space. I can appreciate the fact of XT reserves and the ‘upcoming’ proof-of-reserves system as evidence but it does little to help explain that a lot of money went into the hacker’s wallet.

這不僅為交易所敲響了警鐘，也為用戶敲響了警鐘，讓他們意識到在加密貨幣領域進行交易時進行監控的必要性。我可以欣賞 XT 儲備金和「即將推出的」儲備證明系統作為證據的事實，但這並不能幫助解釋大量資金進入了駭客的錢包。

A Wake-Up Call for the IndustryHacks, rug pulls and frauds are not a rare phenomenon in the sphere of cryptocurrencies. According to a survey conducted by 5Money and Storible, found that American founders are associated with 43% scam crypto projects and 33% global dead projects.

給業界敲響了警鐘駭客、詐騙和詐欺在加密貨幣領域並不罕見。根據 5Money 和 Storible 進行的一項調查，發現美國創辦人與 43% 的詐騙加密項目和 33% 的全球死亡項目有關。

Radiant Capital was attacked in October 2024, losing $50 million. Hackers took over three of 11 multisig wallet keys by infiltrating malware into three of the smart contracts, siphoning funds from Binance BNB Chain and Arbitrum into Ethereum.

Radiant Capital於2024年10月遭到攻擊，損失5,000萬美元。駭客透過將惡意軟體滲透到其中三個智能合約中，竊取了 11 個多重簽名錢包密鑰中的三個，將幣安 BNB 鍊和 Arbitrum 的資金轉移到以太坊。

In September 2024, BingX lost $52M after attackers breached its hot wallets on Ethereum, Binance Smart Chain, and Avalanche. The stolen assets, including ETH and USDT, were laundered via decentralized exchanges. BingX assured users of compensation and tightened security.

2024 年 9 月，攻擊者攻破了 BingX 在以太坊、幣安智慧鍊和 Avalanche 上的熱錢包，導致 BingX 損失 5,200 萬美元。包括 ETH 和 USDT 在內的被盜資產是透過去中心化交易所進行洗錢的。 BingX向用戶保證賠償並加強安全性。

WazirX was hit by hackers that stole $230 million in July 2024 due to a vulnerability in the multisig wallet. Assets stolen include SHIB tokens, ETH, and MATIC. The exchange halted withdrawal access, committed to compensating users and cooperated with law enforcement to track the funds.

2024 年 7 月，由於多重簽名錢包中的漏洞，WazirX 遭到駭客攻擊，竊取了 2.3 億美元。被竊資產包括SHIB代幣、ETH和MATIC。該交易所停止了提款訪問，承諾對用戶進行賠償，並配合執法部門追蹤資金。