分散的Exchange Kiloex已确认它已暂停其平台的使用情况，并在遭受750万美元的利用后正在追踪被盗的资金。

Kiloex团队在4月14日向X的声明中表示，通过暂停该平台和调查的平台，该漏洞已包含。

Decentralized exchange KiloEX has confirmed it has suspended usage of its platform and is tracing stolen funds after suffering a $7.5 million exploit.

分散的Exchange Kiloex已确认它已暂停其平台的使用情况，并在遭受750万美元的利用后正在追踪被盗的资金。

The exploit has now been contained, with use of the platform suspended and an investigation underway, the KiloEX team said in an April 14 statement to X.

Kiloex小组在4月14日向X.

“The team has immediately suspended platform usage and is working with security partners to trace the flow of funds,” KiloEX said.

Kiloex说：“该团队立即暂停了平台使用情况，并正在与安全合作伙伴合作以追踪资金的流动。”

“We are analyzing the attack vector and affected assets. We are collaborating with ecosystem partners to trace and recover funds where possible.”

“我们正在分析攻击向量和影响的资产。我们正在与生态系统合作伙伴合作，在可能的情况下追溯和收回资金。”

A bounty program and a full report on how the exploit occurred is also in the works, according to KiloEX.

根据Kiloex的说法，赏金计划和有关利用方式如何发生的完整报告。

In an update, the KiloEX team said it was collaborating with BNB Chain, Manta Network, and cybersecurity firms Seal-911, SlowMist and Sherlock in an effort spanning “multiple ecosystems.”

在更新中，Kiloex团队表示，它正在与BNB连锁店，Manta Network和网络安全公司SEAL-911，SlowMist和Sherlock合作，以跨越“多个生态系统”的努力。

“Our investigation has confirmed that the stolen assets are currently being routed through zkBridge and Meson,” KiloEX said.

基洛克斯说：“我们的调查已经确认，目前正在通过兹布里奇和梅森进行路线。”

“We are urgently attempting to engage with both protocols to halt ongoing transactions and prevent additional losses.”

“我们迫切地试图使用这两种方案来停止正在进行的交易并防止其他损失。”

KiloEX attacker exploited price oracle issue, say analysts

分析师说，Kiloex攻击者利用价格甲骨文问题

Cybersecurity firm PeckShield said in an April 14 post to X the exploiter looted $7.5 million in total, $3.3 million Base, $3.1m opBNB and $1m BSC.

网络安全公司Peckshield在4月14日的帖子中表示，X剥削者抢劫了750万美元，总计330万美元，310万美元的Opbnb和100万美元的BSC。

The firm has speculated the exploit is likely a “price oracle issue,” where the information used by a smart contract to determine the price of an asset is manipulated or inaccurate, leading to the exploit.

该公司推测该利用可能是“价格甲骨文问题”，其中智能合约用来确定资产价格的信息被操纵或不准确，从而导致利用。

“Our initial analysis on one transaction exploit indicates a price oracle issue,” PeckShield said.

Peckshield说：“我们对一项交易利用的初步分析表明了价格甲骨文问题。”

“The hacker exploits it to create a new position with initial given ETHUSD price of 100 and then immediately close the position with inflated ETHUSD price of 10000, netting the $3.12m profit in one single transaction.”

“黑客利用它以创建一个新的头寸，初始给定的Ethusd价格为100，然后立即以10000的Ethusd价格夸大了该职位，从而在一次交易中获得了312万美元的利润。”

Chaofan Shou, co-founder of blockchain analytics firm Fuzzland, also weighed in, speculating the exploit was likely due to a price oracle issue.

区块链分析公司Fuzzland的联合创始人Chaofan Shou也称赞，猜测漏洞可能是由于价格甲骨文问题。

“Anyone can change the Kilo’s price oracle. They did verify that the caller shall be a trusted forwarder, though, but didn’t verify the forwarded caller,” Shou said.

舒说：“任何人都可以更改千里的价格。

Shou added it was a “very simple vulnerability” when a user asked about the complexity of the exploit.

Shou补充说，当用户询问利用的复杂性时，这是一个“非常简单的漏洞”。

The news has sent the KiloEX’s native token, Kilo, plunging over 27% to trade at $0.03596, according to CoinGecko. It’s still down over 78% from its all-time high of $0.1648, which it hit on March 27.

据Coingecko称，这一消息已使Kiloex的原住民代币（Kilo）跌落了27％以上的交易价格为0.03596美元。它的历史最高高点仍然下降了78％以上，该高点在3月27日达到了0.1648美元。

KiloEx was established in 2023 and is backed by Binance Labs, which is a lead investor and strategic partner.

Kiloex成立于2023年，并得到了Binance Labs的支持，Binance Labs是主要投资者和战略合作伙伴。

This exploit comes just days after the exchange announced a partnership with Dubai-based Web3 venture capitalist firm DWF Labs on April 13, which promised to expand KiloEx's market presence and accelerate growth.

该漏洞利用仅在交易所于4月13日与总部位于迪拜的Web3 Venture资本主义公司DWF Labs建立合作伙伴关系后几天，该公司承诺将扩大Kiloex的市场业务并加速增长。

On March 25, DWF Labs launched a $250 million Liquid Fund to accelerate the growth of mid- and large-cap blockchain projects and drive real-world adoption of Web3 technologies.

3月25日，DWF实验室推出了2.5亿美元的流动基金，以加速中型和大型区块链项目的增长，并推动对Web3技术的现实采用。