Stablecoin支付公司Infini损失了5000万美元的利用，承诺全额赔偿

据信，肇事者曾在Infini项目进行合同制定项目中工作，但在该项目完成后秘密保留管理权

Stablecoin payment firm Infini has lost nearly $50 million in an exploit that was conducted by a developer who retained administrative privileges after project delivery, according to security firm Cyvers.

据安全公司Cyvers称，Stablecoin支付公司Infini在项目交付后保留行政特权的开发商进行了近5000万美元的利用。

The attacker funded the wallet used in the hack with 1 Ether (ETH) from the cryptocurrency mixing service Tornado Cash and went on to transfer $49.52 million in USD Coin (USDC) from Infini through a contract they created in November 2024.

攻击者资助了黑客中使用的钱包，并从加密货币混合服务龙卷风现金中提供了1醚（ETH），然后通过2024年11月的合同从Infini转移了4,952万美元的USD Coin（USDC）。

The USDC was immediately swapped for Dai (DAI), a stablecoin that doesn’t have a freeze function. The funds were then converted to 17,696 ETH and moved into a secondary address at the time of writing.

USDC立即被换成Dai（Dai），这是一种没有冻结功能的稳定币。然后将资金转换为17,696 ETH，并在撰写本文时转化为次要地址。

The Infini team did not pause withdrawals, and founder Christian Li claimed in an X post that full compensation would be paid in a worst-case scenario.

Infini团队没有停下戒烟，创始人克里斯蒂安·李（Christian Li）在X帖子中声称，在最坏的情况下将支付全部赔偿。

The platform has observed $500,000 in withdrawals since the theft, according to Li.

据李说，自盗窃以来，该平台已经观察到了500,000美元的提款。

In a now-deleted tweet, Infini team member “Christine” stated that the engineer responsible for the theft had been identified and reported to the police.

在一条现已删除的推文中，英菲尼团队成员“克里斯汀”表示，已确定了负责盗窃的工程师并向警方报告。

However, when asked by Cointelegraph to confirm the information, she said: “We are still investigating.”

但是，当Cointelegraph要求确认信息时，她说：“我们仍在调查。”

The attack on Infini follows a record-breaking hack on cryptocurrency exchange Bybit, which lost $1.4 billion in Ether and related tokens on Feb. 21.

Infini的袭击是在加密货币交易所Bybit上的创纪录的黑客攻击之后，2月21日在以太币和相关令牌中损失了14亿美元。

The large-scale attack on a major exchange raised concerns about possible insolvency at the time. However, the exchange opted for a rare strategy of keeping withdrawals open and vowed to cover the loss if funds could not be recovered.

对重大交流的大规模攻击引起了人们对当时可能破产的担忧。但是，该交易所选择了一种罕见的策略，即如果无法收回资金，则誓言要保持撤离并发誓要弥补损失。

Bybit relied on loans from partners and rival exchanges to meet the immediate liquidity demands of customer withdrawals, which totaled over $5 billion, according to DefiLlama data.

根据Defillama的数据，Bybit依靠合作伙伴和竞争对手交流的贷款来满足客户提款的直接流动性需求，总计超过50亿美元。

On Feb. 24, Bybit CEO Ben Zhou announced that the exchange had fully closed its Ether gap.

2月24日，拜比特首席执行官本周宣布该交易所完全封闭了其以太差距。

Onchain detective ZachXBT identified North Korea’s state-sponsored hacking group Lazarus as a prime suspect in the attack on Bybit.

Onchain侦探Zachxbt将朝鲜赞助的黑客黑客组织拉撒路（Lazarus）确定为对拜比特（Bybit）袭击的主要嫌疑人。

ZachXBT linked the Bybit hacker’s wallet to an attack carried out on Phemex in January, as well as to the attack against BingX, both of which have been attributed to North Korea.

Zachxbt将Bybit Hacker的钱包与一月份在Phemex进行的袭击以及对Bingx的袭击联系起来，这两者都归因于朝鲜。