Metawin 黑客：黑客如何利用加密货币赌场的无摩擦提款系统窃取 400 万美元

加密的高科技世界始终面临着黑客攻击的风险。 2024 年也不例外，发生了一系列引人注目的事件。即使今年即将结束，黑客的脚步也没有放缓。

Cryptocurrency platforms are a prime target for hackers, and 2024 is no exception. Despite the year coming to a close, these bad actors show no sign of slowing down.

加密货币平台是黑客的主要目标，2024 年也不例外。尽管这一年即将结束，但这些坏人并没有表现出放缓的迹象。

In the latest incident, a crypto casino called Metawin was hit with a $4 million hack. Here's how investigators say the funds were stolen from Metawin's Ethereum and Solana wallets.

在最近的事件中，一家名为 Metawin 的加密货币赌场遭受了 400 万美元的黑客攻击。以下是调查人员所说的资金从 Metawin 的以太坊和 Solana 钱包中被盗的情况。

Hackers Hit Crypto Casino Metawin in $4 Million Exploit

加密货币赌场 Metawin 遭黑客攻击，损失 400 万美元

Blockchain investigator ZachXBT revealed on his Telegram channel that the hackers used 115 Ethereum and Solana wallet addresses for the exploits.

区块链调查员 ZachXBT 在他的 Telegram 频道上透露，黑客使用了 115 个以太坊和 Solana 钱包地址进行攻击。

According to the investigator, the hackers exploited the protocol's frictionless withdrawal system by placing a large number of withdrawal orders consecutively, which helped them bypass the platform's security checks.

调查人员表示，黑客利用该协议的无摩擦提款系统，连续下达大量提款指令，从而绕过了平台的安全检查。

Both frictionless withdrawals and hot wallets present a security challenge for crypto platforms. While making transactions more convenient, they also expose users' funds to a higher hacking risk.

无摩擦提款和热钱包都给加密平台带来了安全挑战。在让交易变得更加便捷的同时，它们也让用户的资金面临更高的黑客风险。

“So far the stolen funds have been transferred to Kucoin and a HitBTC nested service,” ZachXBT explained.

“到目前为止，被盗资金已转移至 Kucoin 和 HitBTC 嵌套服务，”ZachXBT 解释道。

Metawin's Response to the Wallet Hack

Metawin 对钱包黑客事件的回应

In response to the hack, Metawin's CEO, Richard Skelhorn, announced several measures to protect users and restore confidence.

为了应对此次黑客攻击，Metawin 首席执行官 Richard Skelhorn 宣布了多项保护用户并恢复信心的措施。

Firstly, the platform took immediate action to halt withdrawals, allowing the team to address the risk and prevent further losses.

首先，平台立即采取行动停止提币，让团队能够应对风险并防止进一步的损失。

Moreover, Skelhorn assured the users that anyone who lost funds would be made whole. In a statement on the platform's Discord server, he promised to use his own funds to recover the $4 million in losses.

此外，Skelhorn 向用户保证，任何损失资金的人都会得到补偿。在该平台 Discord 服务器上的一份声明中，他承诺使用自己的资金弥补 400 万美元的损失。

He also revealed that the platform is working with law enforcement to recover the stolen funds.

他还透露，该平台正在与执法部门合作追回被盗资金。

Despite these measures, the hack highlights the risks of storing user assets on hot wallets, as they are connected to the internet and pose an increased threat of being hacked.

尽管采取了这些措施，这次黑客攻击还是凸显了将用户资产存储在热钱包上的风险，因为它们连接到互联网并构成了更大的被黑客攻击的威胁。

On the Flipside

另一方面

Why This Matters

为什么这很重要

The Metawin hack showcases the risks of storing assets in hot wallets and the specific accessibility features. While these features are designed to enhance user convenience, they also inadvertently make hacking easier.

Metawin 黑客攻击展示了将资产存储在热钱包中的风险以及特定的可访问性功能。虽然这些功能旨在增强用户便利性，但它们也在无意中使黑客攻击变得更加容易。

Read more about crypto hacking: Hackers Steal $313.86M in Crypto Across Over 10 Incidents in August

了解有关加密货币黑客攻击的更多信息：黑客在 8 月份的 10 多起事件中窃取了 3.1386 亿美元的加密货币

Read more about Jim Cramer's failed prediction for Solana: Solana Proves Jim Cramer Wrong, Rises 1,400% Since Critique

阅读有关 Jim Cramer 对 Solana 失败预测的更多信息：Solana 证明 Jim Cramer 错误，自批评以来股价上涨 1,400%