由于 ZK-Rollup 协议损失 500 万美元，Loopring 遭受智能钱包漏洞

以太坊 ZK-Rollup 协议路印协议 (Loopring) 于 6 月 9 日报告称，其部分智能钱包被利用，金额不详。

Some Loopring smart wallets were exploited on June 9, with Blockchain security firm Cyvers Alert reporting that approximately 1,373 ETH, valued at $5 million, was stolen in the hack.

6 月 9 日，一些 Loopring 智能钱包遭到利用，区块链安全公司 Cyvers Alert 报告称，大约 1,373 ETH（价值 500 万美元）在此次黑客攻击中被盗。

Following the news, Loopring’s LRC token dropped by approximately 4%, hitting a four-month low of $0.21, according to CryptoSlate’s data.

根据 CryptoSlate 的数据，消息传出后，Loopring 的 LRC 代币下跌了约 4%，触及 0.21 美元的四个月低点。

Loopring smart wallets are described by the firm as the “most secured wallets” on the Ethereum blockchain due to security measures in place designed to protect against asset theft.

Loopring 智能钱包被该公司描述为以太坊区块链上“最安全的钱包”，因为它采取了旨在防止资产被盗的安全措施。

However, the firm explained that its two-factor authentication service was compromised, allowing the malicious actor to initiate a recovery process, reset ownership, and withdraw assets. Loopring stated:

然而，该公司解释说，其两因素身份验证服务遭到破坏，使得恶意行为者能够启动恢复过程、重置所有权并撤回资产。路印协议表示：

“The attack succeeded by compromising Loopring’s Two-Factor Authentication (2FA) service, allowing the hacker to impersonate the wallet owner and gain approval for the Recovery from the Official Guardian. Subsequently, the attacker transferred assets out of the affected wallets.”

“这次攻击通过破坏路印协议的双因素身份验证（2FA）服务而成功，使黑客能够冒充钱包所有者并获得官方监护人的恢复批准。随后，攻击者将资产从受影响的钱包中转移出来。”

Meanwhile, Loopring said it was working with blockchain security firm SlowMist to determine how its 2FA service was compromised. The team has temporarily suspended Guardian and other 2FA-related operations. It added:

与此同时，Loopring 表示正在与区块链安全公司 SlowMist 合作，以确定其 2FA 服务是如何受到损害的。该团队已暂时停止 Guardian 和其他 2FA 相关操作。它补充说：

“Loopring is working with law enforcement and professional security teams to track down the perpetrator. We will continue to provide updates as soon as the investigation progresses.”

“Loopring 正在与执法部门和专业安全团队合作追查肇事者。一旦调查取得进展，我们将继续提供最新情况。”

This breach occurs as smart wallets are gaining traction in the Ethereum community.

这一漏洞发生之际，智能钱包在以太坊社区中越来越受欢迎。

Over the past year, support for smart wallets has surged following the Ethereum Foundation’s ERC-4337 account abstraction going live on the Ethereum mainnet. This technology allows users to customize their digital asset management.

在过去的一年里，随着以太坊基金会的 ERC-4337 账户抽象在以太坊主网上上线，对智能钱包的支持激增。该技术允许用户定制他们的数字资产管理。

Prominent figures like Vitalik Buterin and organizations like Coinbase have backed this technology, which is expected to be part of the upcoming Pectra hard fork.

Vitalik Buterin 等知名人士和 Coinbase 等组织都支持这项技术，预计该技术将成为即将推出的 Pectra 硬分叉的一部分。

However, decentralization advocate Chris Blec noted that the Loopring incident demonstrates that “smart wallets are not ready for prime-time,” advising users to “stick with properly-secured seed phrases for maximum safety and sovereignty.”

然而，去中心化倡导者 Chris Blec 指出，路印协议事件表明“智能钱包还没有准备好迎接黄金时段”，建议用户“坚持使用适当保护的种子短语，以获得最大的安全性和主权。”

Similarly, Pratik Kala, Head of Research at Liquid Digital Assets, commented:

同样，Liquid Digital Assets 研究主管 Pratik Kala 评论道：

“Smart wallets are the rave [at the moment] but new attack vectors come with new tech. We’ll get over it over time but be safe and use hardware wallets for [significant assets.]”

“智能钱包（目前）很流行，但新技术也带来了新的攻击媒介。随着时间的推移，我们会克服这个问题，但为了安全起见，请使用硬件钱包来存储[重要资产]。”

Mentioned in this articleOluwapelumi AdejumoOluwapelumi values Bitcoin’s potential. He imparts insights on a range of topics like DeFi, hacks, mining and culture, underlining transformative power.Liam ‘Akiba’ WrightAlso known as “Akiba,” Liam is a reporter, editor and podcast producer at CryptoSlate. He believes that decentralized technology has the potential to make widespread positive change.

本文中提到 Oluwapelumi AdejumoOluwapelumi 非常看重比特币的潜力。他就 DeFi、黑客、挖矿和文化等一系列主题发表了见解，强调了变革的力量。Liam 'Akiba' Wright 也被称为“Akiba”，Liam 是 CryptoSlate 的记者、编辑和播客制作人。他相信去中心化技术有潜力带来广泛的积极改变。