Hedgefinance 在双重网络攻击中损失 4400 万美元

DeFi 平台 Hedgey Finance 遭遇 Arbitrum 和以太坊两次攻击，造成 4400 万美元损失。对 Arbitrum 的第一次攻击导致价值 4280 万美元的 ARB 代币被盗，而对以太坊的第二次攻击则导致价值 190 万美元的 ARB 代币被盗。网络安全公司 Cyvers Alerts 就最初的攻击向用户和 Hedgey Finance 团队发出了警报。

Hedgey Finance Suffers Double Attack, Resulting in $44 Million Loss

对冲金融遭遇双重攻击，损失4400万美元

Hedgey Finance, a decentralized finance (DeFi) platform, has fallen victim to two separate attacks in the early hours of Friday, leading to the loss of approximately $44 million worth of cryptocurrency.

去中心化金融 (DeFi) 平台 Hedgey Finance 在周五凌晨遭受了两次独立攻击，导致价值约 4400 万美元的加密货币损失。

Arbitrum Attack

任意攻击

The first attack occurred on the Arbitrum blockchain, where malicious actors exploited a vulnerability to drain $42.8 million worth of ARB tokens from Hedgey Finance's smart contracts. This substantial theft was detected and reported by Cyvers Alerts, a leading cybersecurity firm.

第一次攻击发生在 Arbitrum 区块链上，恶意行为者利用漏洞从 Hedgey Finance 的智能合约中盗取了价值 4280 万美元的 ARB 代币。这起重大盗窃事件是由领先的网络安全公司 Cyvers Alerts 发现并报告的。

Ethereum Attack

以太坊攻击

Approximately two hours later, a second attack targeted Hedgey Finance on the Ethereum blockchain. This time, attackers siphoned off $1.9 million worth of Ethereum (ETH), which was subsequently converted into Dai, a stable cryptocurrency pegged to the value of the US dollar.

大约两个小时后，第二次攻击针对以太坊区块链上的 Hedgey Finance。这一次，攻击者窃取了价值 190 万美元的以太坊 (ETH)，随后将其兑换成与美元价值挂钩的稳定加密货币 Dai。

Initial Response

初步反应

Cyvers Alerts promptly alerted Hedgey Finance and the broader DeFi community about the initial attack, prompting the platform's team to initiate an investigation. Within hours, Hedgey Finance issued a security alert, urging users to cancel any active token claims on its platform.

Cyvers Alerts 立即就最初的攻击向 Hedgey Finance 和更广泛的 DeFi 社区发出警报，促使该平台团队启动调查。几个小时内，Hedgey Finance 发布了安全警报，敦促用户取消其平台上任何活跃的代币认领。

Affected Protocols

受影响的协议

Several DeFi protocols were impacted by the attack, including Noble Blocks, a Decentralized Science (DeSci) project that had a vesting contract with Hedgey Finance. Vesting contracts are utilized to gradually release tokens over a predetermined period.

多个 DeFi 协议受到此次攻击的影响，其中包括 Noble Blocks，这是一个与 Hedgey Finance 签订了归属合同的去中心化科学 (DeSci) 项目。归属合约用于在预定期限内逐步释放代币。

Potential Vulnerability

潜在的漏洞

Blockchain sleuths have speculated that the Ethereum-based attack may have been facilitated by a single line of code. However, the Hedgey Finance team has not yet officially confirmed this theory.

区块链侦探推测，基于以太坊的攻击可能是由一行代码促成的。不过，Hedgey Finance团队尚未正式证实这一理论。

Ongoing Investigation

正在进行的调查

At the time of writing, Hedgey Finance has not provided any further updates on the situation. The platform's team is actively investigating the attacks to determine the exact cause and implement measures to prevent similar incidents in the future.

截至撰写本文时，对冲基金尚未提供有关情况的任何进一步更新。该平台的团队正在积极调查这些攻击，以确定确切原因并采取措施防止将来发生类似事件。

DeFi Security Concerns

DeFi 安全问题

The Hedgey Finance attack highlights the ongoing security challenges within the DeFi ecosystem. Smart contract vulnerabilities and malicious actors pose significant risks to users and platforms alike. As the DeFi industry continues to grow and evolve, it is crucial for stakeholders to prioritize security measures and auditing protocols to mitigate vulnerabilities and protect user funds.

Hedgey Finance 攻击凸显了 DeFi 生态系统中持续存在的安全挑战。智能合约漏洞和恶意行为者给用户和平台带来重大风险。随着 DeFi 行业的不断发展和发展，利益相关者优先考虑安全措施和审计协议以减少漏洞并保护用户资金至关重要。