Loopring 智能钱包被攻陷

几个小时前，一些路印协议智能钱包遭遇安全漏洞。这次攻击利用了只有一名监护人的钱包

DeFi platform Loopring suffered a $5 million hack targeting its "Ethereum’s most secure wallet" Guardian 2FA service.

DeFi 平台 Loopring 遭受了 500 万美元的黑客攻击，目标是其“以太坊最安全的钱包”Guardian 2FA 服务。

The attacker exploited a vulnerability to reset wallets with a single Guardian.

攻击者利用一个漏洞通过单个监护人重置钱包。

Loopring is investigating with Mist Security & looking for the hacker. Loopring's token price dropped 5%.

Loopring 正在与 Mist Security 合作调查并寻找黑客。 Loopring的代币价格下跌了5%。

Loopring, a decentralized finance (DeFi) protocol on Ethereum, has been hacked, resulting in a $5 million loss. The attack targeted Loopring’s ‘Guardian’ two-factor authentication (2FA) service, designed to enhance the security of its smart wallet, known as “Ethereum’s most secure wallet.”

以太坊上的去中心化金融 (DeFi) 协议路印协议 (Loopring) 遭到黑客攻击，造成 500 万美元损失。此次攻击针对的是 Loopring 的“Guardian”双因素身份验证（2FA）服务，该服务旨在增强其被称为“以太坊最安全的钱包”的智能钱包的安全性。

🚨Incident Alert: Loopring Smart Wallets Compromised🚨A few hours ago, some Loopring Smart Wallets were targeted in a security breach. The attack exploited wallets with only one Guardian, specifically the Loopring Official Guardian. The hacker initiated a Recovery process,… pic.twitter.com/Y9mYC4j9QJ

🚨事件警报：路印协议智能钱包遭到入侵🚨几个小时前，一些路印协议智能钱包遭遇安全漏洞。这次攻击利用了只有一名监护人的钱包，特别是路印协议官方监护人。黑客启动了恢复过程，… pic.twitter.com/Y9mYC4j9QJ

But how did hackers crack this supposedly impenetrable system? And what does it mean for your crypto holdings? Read on to find out…

但黑客是如何破解这个看似坚不可摧的系统的呢？这对您持有的加密货币意味着什么？请仔细阅读，找出答案…

Guardian 2FA Service Exploited

Guardian 2FA 服务被利用

The Guardian service allows customers with specific wallets to invite trusted wallets for security tasks, like freezing a compromised wallet or recovering it if the seed phrase is lost. However, a hacker exploited a vulnerability in Loopring’s Official Guardian service, performing unauthorized recoveries on wallets that used a single guardian. Wallets with multiple guardians or those using different types of guardians were not affected.

Guardian 服务允许拥有特定钱包的客户邀请受信任的钱包执行安全任务，例如冻结受损的钱包或在种子短语丢失时恢复它。然而，黑客利用路印协议官方监护人服务中的漏洞，对使用单一监护人的钱包进行未经授权的恢复。具有多个监护人或使用不同类型监护人的钱包不受影响。

Scope of the Attack

攻击范围

Blockchain data analysis revealed that two wallets were involved in the breach, with one wallet being completely drained of about $5 million in tokens.

区块链数据分析显示，有两个钱包参与了此次泄露，其中一个钱包的约 500 万美元代币被完全耗尽。

Jumping Into Action

立即行动

In response, Loopring announced on social media platform X that it is working with Mist Security to identify the vulnerability in the 2FA service. To protect users, Loopring has temporarily suspended all Guardian and 2FA functions, preventing further unauthorized access.

对此，Loopring 在社交媒体平台 X 上宣布，正在与 Mist Security 合作识别 2FA 服务中的漏洞。为了保护用户，路印协议暂时中止了所有Guardian和2FA功能，防止进一步的未经授权的访问。

Edit + update:We are working with @SlowMist_Team and some other security experts and authorities to continue to investigate this incident.

编辑+更新：我们正在与@SlowMist_Team以及其他一些安全专家和权威机构合作，继续调查此事件。

We will update the community here as soon as we have more information to share. Security and user protection remain our top priorities.

一旦我们有更多信息可供分享，我们将立即在此处更新社区。安全和用户保护仍然是我们的首要任务。

How Will the Markets React?

市场将如何反应？

Loopring is actively trying to identify the hacker and has requested the community’s help in providing any relevant information. Since the breach was disclosed, Loopring’s native token, LRC, has dropped by about 5% in the last day, currently trading at $0.2171, reflecting the market’s reaction to the incident.

路印协议正在积极尝试识别黑客身份，并请求社区帮助提供任何相关信息。自泄露事件被披露以来，Loopring 的原生代币 LRC 在最后一天下跌了约 5%，目前交易价格为 0.2171 美元，反映了市场对该事件的反应。

This incident highlights the ongoing challenges in securing decentralized finance platforms and underscores the need for strong, multi-layered security measures.

这一事件凸显了保护去中心化金融平台所面临的持续挑战，并强调需要采取强有力的多层安全措施。

Feeling nervous about your crypto holdings? Learn more about crypto security here: A Comprehensive Guide to Keeping Your Crypto Safe

对您持有的加密货币感到紧张吗？在此处了解有关加密安全的更多信息：保持加密安全的综合指南