Sonne Finance 网络攻击导致数百万美元损失

Sonne Finance 是一种在 Optimism 和 Base 上运行的流动性市场协议，受到了重大网络攻击。区块链安全公司 Cyvers 于 5 月 15 日凌晨发现了此次攻击，初步估计损失为 300 万美元。然而，情况迅速恶化，Cyvers 在 30 分钟内将损失估计更新为 2000 万美元。 Sonne Finance 已在 Twitter 上承认了这一事件，并暂停了 Optimism 上的所有市场，而 Base 上的市场则不受影响。

Sonne Finance Suffers Major Cyberattack, Millions Lost

Sonne Finance 遭受重大网络攻击，数百万人损失

On May 15, the decentralized liquidity market protocol Sonne Finance, operating on Optimism and Base blockchains, fell victim to a significant cyberattack. Blockchain security firm Cyvers detected the incursion in the early morning hours of Asia time.

5 月 15 日，在 Optimism 和 Base 区块链上运行的去中心化流动性市场协议 Sonne Finance 成为重大网络攻击的受害者。区块链安全公司 Cyvers 在亚洲时间凌晨检测到此次入侵。

Initial Breach and Escalating Losses

最初的违约和不断增加的损失

Cyvers initially reported that $3 million had been stolen from Sonne's USD Coin (USDC) and Wrapped Ethereum (WETH) contracts on its Optimism chain. However, the situation deteriorated rapidly. Within 30 minutes, Cyvers revised the loss estimate to $20 million, triggering an urgent warning to Sonne Finance to take immediate action.

Cyvers 最初报告称，Sonne 的 Optimism 链上的美元代币 (USDC) 和 Wrapped Ethereum (WETH) 合约中的 300 万美元被盗。然而，情况迅速恶化。 30 分钟内，Cyvers 将损失预估修正为 2000 万美元，向 Sonne Finance 发出紧急警告，要求其立即采取行动。

Contracts Exploited and Fake Account Scam

合约利用和虚假账户诈骗

Cyvers identified that Sonne Finance's contracts had been exploited, allowing the attacker to drain digital assets. Approximately an hour after the breach was detected, Sonne Finance acknowledged the incident on Twitter, confirming that markets on its Optimism blockchain had been paused for security purposes.

Cyvers 发现 Sonne Finance 的合约已被利用，攻击者可以盗取数字资产。检测到漏洞大约一个小时后，Sonne Finance 在 Twitter 上承认了这一事件，并确认出于安全目的，其 Optimism 区块链上的市场已暂停。

Meanwhile, BeInCrypto uncovered a fraudulent Twitter account impersonating Sonne Finance and urging users to revoke all approvals to prevent further losses. The fake account shared a suspicious link that purported to check exposure to the exploit and revoke approvals, but the tweet was later deleted.

与此同时，BeInCrypto 发现了一个冒充 Sonne Finance 的欺诈性 Twitter 帐户，并敦促用户撤销所有批准，以防止进一步损失。该虚假帐户分享了一个可疑链接，旨在检查漏洞的暴露情况并撤销批准，但该推文后来被删除。

Crypto Industry Faces Cybersecurity Challenges

加密行业面临网络安全挑战

This attack on Sonne Finance underscores the ongoing vulnerabilities within the decentralized finance (DeFi) sector. DeFi platforms hold substantial amounts of digital assets, making them attractive targets for cybercriminals. The incident also highlights the importance of implementing robust security measures to safeguard digital assets.

此次针对 Sonne Finance 的攻击凸显了去中心化金融（DeFi）领域持续存在的漏洞。 DeFi 平台持有大量数字资产，使其成为网络犯罪分子的有吸引力的目标。该事件还凸显了实施强有力的安全措施来保护数字资产的重要性。

The crypto industry has witnessed a decrease in hacking incident frequency, with a reported decline of over 65% from April 2024 to April 2025. However, the magnitude of losses remains significant. According to the SlowMist Weekly Security Report, crypto-related security incidents resulted in total losses of $71.39 million from April 28 to May 4, 2024.

加密行业的黑客事件频率有所下降，据报道从 2024 年 4 月到 2025 年 4 月下降了 65% 以上。然而，损失的规模仍然很大。据慢雾每周安全报告显示，2024 年 4 月 28 日至 5 月 4 日期间，与加密相关的安全事件造成的总损失达 7139 万美元。

Separate Incident at BlockTower Capital

BlockTower Capital 的另一起事件

In a separate development, crypto investment firm BlockTower Capital reportedly experienced a cyberattack, with undisclosed sources alleging that fraudsters drained a portion of its main hedge fund. The stolen funds remain missing, and the attacker's identity is unknown. BlockTower Capital has hired blockchain forensics analysts to investigate and trace the stolen money. The firm has yet to issue an official statement regarding the incident.

另据报道，加密货币投资公司 BlockTower Capital 遭遇了网络攻击，未公开的消息来源称欺诈者耗尽了其主要对冲基金的部分资金。被盗资金至今下落不明，攻击者身份不明。 BlockTower Capital 已聘请区块链取证分析师来调查和追踪被盗资金。该公司尚未就该事件发表正式声明。

The frequency of cyberattacks targeting the crypto industry continues to be a concern, emphasizing the need for heightened vigilance and the adoption of robust security protocols by companies and investors alike.

针对加密货币行业的网络攻击的频率仍然令人担忧，这强调了公司和投资者需要提高警惕并采用强大的安全协议。