8 月区块链安全报告：网络钓鱼受害者达 9K，Ronin 黑客返还 1200 万美元

一份新的区块链安全报告显示，上个月加密货币领域的安全事件猖獗，损失估计已达到惊人的 3.16 亿美元。

KEY POINTS

要点

Last month, there was a surge in security incidents in the cryptocurrency industry, with an estimated loss of $316 million, and only $13.58 million was recovered, a new blockchain security report revealed.

一份新的区块链安全报告显示，上个月，加密货币行业安全事件激增，预计损失达 3.16 亿美元，但仅追回 1358 万美元。

The attacks ranged from account compromises, frontend breaches, contract vulnerabilities, to a method that many exploiters have benefited from over the years: phishing, according to blockchain security firm SlowMist.

根据区块链安全公司 SlowMist 的说法，这些攻击的范围包括账户泄露、前端违规、合约漏洞，以及多年来许多利用者受益的方法：网络钓鱼。

Phishing Victims Top 9K

网络钓鱼受害者前 9K

SlowMist's August security report, published Monday, showed that there were 9,145 victims of phishing scams in the crypto industry last month, according to data from Web3 anti-fraud platform Scam Sniffer.

周一发布的慢雾 8 月份安全报告显示，根据 Web3 反欺诈平台 Scam Sniffer 的数据，上个月加密行业有 9,145 名网络钓鱼诈骗受害者。

One victim lost a staggering $55.43 million in DAI tokens after signing a phishing transaction that targeted their DeFi Saver Proxy. Analysis by anti-money laundering tracking system MistTrack later revealed that most of the stolen tokens were later swapped for Ether (ETH).

一名受害者在签署针对其 DeFi Saver 代理的网络钓鱼交易后损失了 5543 万美元的 DAI 代币。反洗钱跟踪系统 MistTrack 随后的分析显示，大部分被盗代币后来都被换成了以太币（ETH）。

SlowMist noted that most of the phishing attacks in August occurred on Discord. It also highlighted that hackers have been targeting well-known blockchain projects in recent years.

慢雾指出，8 月份的大部分网络钓鱼攻击都发生在 Discord 上。它还强调，近年来黑客一直将目标瞄准知名的区块链项目。

Top Exploits in August

八月的热门攻击

Among the top security incidents analyzed by SlowMist was the hacking of the Ronin Network, where the gaming blockchain network experienced abnormal withdrawals of cross-chain assets on its Ronin Bridge project.

慢雾分析的首要安全事件之一是Ronin Network被黑客攻击的事件，其中游戏区块链网络Ronin Bridge项目出现了跨链资产异常提取的情况。

The Ronin case is particularly interesting because the hackers returned the entire $12 million in pilfered Ether and USD Coin (USDC) tokens. The gaming blockchain said it was alerted by "white hats" to the security breach, which led to the temporary pausing of the bridge.

Ronin 案特别有趣，因为黑客归还了全部 1200 万美元被盗的以太币和美元硬币 (USDC) 代币。游戏区块链表示，它收到了“白帽子”关于安全漏洞的警报，导致桥暂时暂停。

There was a lot of buzz about the incident, with some crypto users and Ronin gamers questioning why the white hat initially wanted to "negotiate" instead of just returning the funds. The white hat was paid a $500,000 bounty, according to SlowMist.

关于这一事件引起了很多热议，一些加密货币用户和 Ronin 游戏玩家质疑为什么白帽子最初想要“谈判”而不是仅仅归还资金。据慢雾科技称，白帽子获得了 50 万美元的赏金。

Another top incident last month was the "suspicious transfer" of a whopping 4,064 Bitcoin (then valued at about $238 million) that was first detected by prominent crypto sleuth ZachXBT, who revealed that the stolen funds were immediately moved to various crypto platforms, including ThorChain. ZachXBT later announced that $205,000 had been returned to the victim.

上个月的另一起重大事件是 4,064 个比特币（当时价值约 2.38 亿美元）的“可疑转移”，这起事件首先由著名加密货币侦探 ZachXBT 发现，他透露，被盗资金立即转移到了各种加密平台，包括 ThorChain 。 ZachXBT 随后宣布已将 205,000 美元返还给受害者。

Seven hours ago a suspicious transfer was made from a potential victim for 4064 BTC ($238M)

七小时前，潜在受害者进行了 4064 BTC（2.38 亿美元）的可疑转账

Transaction hash4b277ba298830ea538086114803b9487558bb093b5083e383e94db687fbe9090

交易哈希4b277ba298830ea538086114803b9487558bb093b5083e383e94db687fbe9090

Funds were quickly transferred to ThorChain, eXch, Kucoin, ChangeNow, Railgun, Avalanche Bridge.

资金迅速转移到ThorChain、eXch、Kucoin、ChangeNow、Railgun、Avalanche Bridge。

Crypto Losses Still Very High

加密货币损失仍然很高

The August losses are much higher than what the crypto industry lost in July, which was around $266 million to exploits and scams. July, however, was a big month for the sector with the highly publicized $230 million exploit of Indian crypto exchange giant WazirX.

8 月份的损失远高于 7 月份加密行业因漏洞和诈骗而损失的约 2.66 亿美元。然而，7 月对于该行业来说是一个重要的月份，印度加密货币交易所巨头 WazirX 的 2.3 亿美元漏洞被广为人知。

Akshay Nassa, founder of 100% encrypted decentralized exchange Chimp Exchange, said at the time that the state of security in the industry only goes to show how exploiters are evolving their methods just as much as crypto companies are working to improve their security measures.

100% 加密去中心化交易所 Chimp Exchange 的创始人 Akshay Nassa 当时表示，行业的安全状况只能表明，利用者正在不断改进他们的方法，就像加密公司正在努力改进其安全措施一样。