Sonne Finance 代币在 Optimism 区块链遭受 2000 万美元黑客攻击后暴跌 60%

在 Optimism 区块链遭受 2000 万美元的攻击后，Sonne Finance 的 SONNE 代币暴跌 60% 至 2.5 美分。该漏洞涉及操纵市场的“捐赠”攻击，是在为 Velodrome Finance 的 VELO 添加代币市场后执行的。然而，Sonne 市场的 Base 区块链版本并未受到影响。

Sonne Finance Token Plummets 60% After Devastating $20 Million Hack on Optimism Blockchain

Optimism 区块链遭黑客攻击造成 2000 万美元损失后，Sonne Finance 代币暴跌 60%

May 15, 2024

2024 年 5 月 15 日

Sonne Finance, a decentralized lending platform, has suffered a severe cyberattack on its Optimism blockchain-based version, leading to the theft of an estimated $20 million in cryptocurrency assets. The incident, which was discovered early Wednesday morning, has sent shockwaves through the cryptocurrency community and resulted in a significant drop in the value of Sonne's native token, SONNE.

Sonne Finance 是一个去中心化借贷平台，其基于 Optimism 区块链的版本遭受了严重的网络攻击，导致约 2000 万美元的加密货币资产被盗。该事件于周三凌晨被发现，在加密货币社区引起了轩然大波，并导致 Sonne 的原生代币 SONNE 的价值大幅下跌。

Manipulation through "Donation" Attack

通过“捐赠”攻击进行操纵

The cyberattackers exploited a vulnerability in Sonne Finance's platform to execute a "donation" attack, which allowed them to manipulate the exchange rate between certain tokens on the platform. By donating large amounts of cryptocurrency to specific markets, the attackers tricked the platform into believing it had more collateral than was actually available. This enabled them to withdraw millions of dollars worth of cryptocurrency, including VELO, ether, and USD Coin (USDC).

网络攻击者利用 Sonne Finance 平台的漏洞执行“捐赠”攻击，从而操纵平台上某些代币之间的汇率。通过向特定市场捐赠大量加密货币，攻击者欺骗该平台，使其相信其拥有的抵押品多于实际可用的抵押品。这使他们能够提取价值数百万美元的加密货币，包括 VELO、以太币和美元硬币 (USDC)。

Exploit Utilized Timelock Mechanism

利用时间锁机制

The exploit was made possible by the platform's two-day timelock mechanism, which is a smart contract that delays transaction execution by a predetermined period. The attackers reportedly exploited this mechanism to execute four transactions that created markets and adjusted collateral factors, setting the stage for their subsequent manipulation of the exchange rates.

该漏洞是通过平台的两天时间锁定机制实现的，该机制是一种智能合约，可将交易执行延迟预定时间。据报道，攻击者利用这一机制执行了四笔交易，这些交易创造了市场并调整了抵押品因素，为他们随后操纵汇率奠定了基础。

Base Blockchain Version Unaffected

基础区块链版本不受影响

It is important to note that the hack only affected Sonne Finance's platform on the Optimism blockchain. The Base blockchain version of the platform was not impacted by the attack, as it operates independently with its own set of security measures. This highlights the potential vulnerabilities that can arise when deploying decentralized applications across multiple blockchain networks.

值得注意的是，此次黑客攻击仅影响了 Optimism 区块链上的 Sonne Finance 平台。该平台的基础区块链版本没有受到攻击的影响，因为它有自己的一套安全措施独立运行。这凸显了跨多个区块链网络部署去中心化应用程序时可能出现的潜在漏洞。

Sonne's Response and Recovery Efforts

Sonne 的应对和恢复努力

Upon discovering the attack, Sonne Finance's developers acted swiftly to pause operations and mitigate further damage. They successfully prevented the theft of an additional $6.5 million worth of assets that had been compromised but not yet withdrawn. The developers have also launched an investigation into the incident and are working to retrieve the stolen funds.

发现攻击后，Sonne Finance 的开发人员迅速采取行动，暂停运营并减轻进一步的损失。他们成功阻止了另外价值 650 万美元的资产被盗，这些资产已被泄露但尚未撤回。开发商也已对此事件展开调查，并正在努力追回被盗资金。

SONNE Token Value Plummets

SONNE 代币价值暴跌

The news of the hack has had a significant impact on the value of Sonne Finance's SONNE token, which plummeted by 60% to 2.5 cents shortly after the announcement. This decline wiped out over $20 million in market capitalization, emphasizing the fragility of decentralized finance protocols in the face of cyberattacks.

黑客攻击的消息对 Sonne Finance 的 SONNE 代币价值产生了重大影响，消息公布后不久，SONNE 代币暴跌 60% 至 2.5 美分。这一下跌导致市值蒸发了超过 2000 万美元，凸显了去中心化金融协议在网络攻击面前的脆弱性。

Industry Impact and Implications

行业影响和影响

The Sonne Finance hack serves as a stark reminder of the constant cybersecurity risks associated with decentralized finance applications. It highlights the need for robust security measures, rigorous audits, and continuous monitoring to protect user funds and maintain trust within the ecosystem.

Sonne Finance 黑客事件清楚地提醒人们，与去中心化金融应用程序相关的持续网络安全风险。它强调需要采取强有力的安全措施、严格的审计和持续监控来保护用户资金并维持生态系统内的信任。

As the cryptocurrency industry continues to evolve and mature, it is imperative for developers and users alike to remain vigilant against potential security threats. The ongoing development of secure and reliable blockchain protocols, along with robust cybersecurity practices, will be crucial in fostering long-term confidence and adoption of decentralized financial services.

随着加密货币行业的不断发展和成熟，开发人员和用户都必须对潜在的安全威胁保持警惕。安全可靠的区块链协议的持续开发以及强大的网络安全实践对于培养长期信心和去中心化金融服务的采用至关重要。