拜比特没有被黑客入侵？

在BYBIT安全事件发生近一周后，两家网络安全公司，Verichains和Sygnia Labs已经出现了细节，这些公司已经确认了BYBIT没有受到损害，并且该漏洞在多智能服务的一边。

Almost a week after the Bybit security incident, details have emerged from two cybersecurity companies, Verichains and Sygnia Labs, which have confirmed the assumption that Bybit was not compromised and the vulnerability was on the side of the multi-sig service Safe.

在BYBIT安全事件发生近一周后，两家网络安全公司，Verichains和Sygnia Labs已经出现了细节，这些公司已经确认了BYBIT没有受到损害，并且该漏洞在多智能服务的一边。

So Bybit Was Not Hacked?

所以拜比没有被黑客入侵吗？

Recall that Bybit turned out to be a record-breaking $1.4B loss incident but also showed record-breaking speed of rebalancing and unprecedented support from partners and big players in the crypto industry.

回想一下，拜比特证明是一个创纪录的1.4B美元损失事件，但也显示出创纪录的重新平衡速度，并在加密货币行业的合作伙伴和大型球员那里得到了前所未有的支持。

Now, the buzz has started to go down and the ZachXBT investigation that began pointing to the role of North Korean hackers, namely Lazarus Group, has started to accumulate new details.

现在，嗡嗡声已经开始下降，Zachxbt的调查开始指出朝鲜黑客的角色，即拉撒路集团，开始积累新的细节。

Two leading cybersecurity firms Verichains and Sygnia Labs conducted independent investigations and concluded that the accusations against the technical security of Bybit’s systems were probably hasty.

两家领先的网络安全公司Verichains和Sygnia Labs进行了独立的调查，并得出结论认为，针对Bybit Systems的技术安全的指控可能是仓促的。

Their report says that the claims that the exchange’s infrastructure was compromised are not accurate and that the incident was likely due to a vulnerability in the multi-sig service that the exchange uses for transferring funds from its cold wallets to hot wallets.

他们的报告说，交换基础设施受到妥协的说法是不准确的，并且该事件可能是由于多智能服务中的脆弱性造成的，该交易所用来将资金从其冷钱包转移到热钱包。

To elaborate, their report points to the following sequence:

为了详细说明，他们的报告指向以下顺序：

Proxy wallet management compromise

代理钱包管理妥协

Spoofs the logic of the proxy contract

欺骗代理合同的逻辑

Funds withdrawal

资金提款

Bybit CEO Ben Zhou also shared the findings of Verichains and Sygnia Labs, which asserted not only that the problem was likely on the Safe services side, but that Bybit’s infrastructure was not compromised.

Bybit首席执行官Ben Zhou还分享了Verichains和Sygnia Labs的发现，这些发现不仅断言问题可能在安全服务方面，而且据Bybit的基础设施并未受到损害。

However, how exactly the attackers were able to introduce malware into the signing infrastructure, such as through a chain of vendors, updates, or an insider, so the investigation is ongoing.

但是，攻击者如何能够将恶意软件引入签署基础架构，例如通过一系列供应商，更新或内部人士，因此正在进行调查。

Conclusion

结论

These are probably not the final details, however, it is very important that they speak in favor of Bybit, one of the largest crypto exchanges in the world responsible for billions of dollars worth of trading.

这些可能不是最终的细节，但是，重要的是，他们支持Bybit，这是世界上最大的加密货币交易所之一，负责数十亿美元的交易。

Be aware and stay tuned for updates on the rapidly evolving regulations and crypto landscape.

请注意，并继续关注有关快速发展的法规和加密景观的最新信息。

The information provided in this article is for informational and educational purposes only and does not constitute financial, investment, or trading advice. Any actions you take based on the information provided are solely at your own risk. We are not responsible for any financial losses, damages, or consequences resulting from your use of this content. Always conduct your own research and consult a qualified financial advisor before making any investment decisions. Read more

本文提供的信息仅用于信息和教育目的，不构成财务，投资或交易建议。根据提供的信息，您采取的任何行动都只有您自身的风险。我们对您使用此内容造成的任何财务损失，损失或后果概不负责。在做出任何投资决策之前，请务必进行自己的研究并咨询合格的财务顾问。阅读更多