虫洞黑客差点获得空投，但团队迅速堵住安全漏洞

2023 年，Wormhole 的空投计划无意中将造成 2022 年 3.2 亿美元违规事件的黑客纳入其中，使他们有资格获得 50,000 美元的代币索赔。尽管出现了最初的错误，Wormhole 团队还是立即将黑客的钱包从空投列表中删除，从而减少了任何潜在的支付。

Wormhole Hacker Briefly Eligible for Airdrop, Promptly Removed

虫洞黑客短暂符合空投资格，立即删除

On April 4, 2023, pseudonymous researcher Pland on X (formerly known as Twitter) exposed a brief lapse in Wormhole's security measures, revealing that wallets connected to the infamous $320 million hack in 2022 were inadvertently added to the list of eligible users for its W token airdrop.

2023 年 4 月 4 日，X（前身为 Twitter）上的化名研究员 Pland 曝光了 Wormhole 安全措施的短暂失误，透露与 2022 年臭名昭著的 3.2 亿美元黑客事件有关的钱包无意中被添加到其 W 的合格用户列表中。代币空投。

The revelation stemmed from an analysis of Wormhole's airdrop eligibility process, which indicated that four wallets linked to the 2022 hack were initially marked as eligible for claiming the airdropped W tokens. Had the hackers exploited this oversight, they could have potentially claimed approximately $50,000 worth of the newly launched cryptocurrency.

这一爆料源于对 Wormhole 空投资格流程的分析，该流程表明与 2022 年黑客攻击有关的四个钱包最初被标记为有资格领取空投的 W 代币。如果黑客利用这一疏忽，他们可能会损失价值约 50,000 美元的新推出的加密货币。

However, a subsequent check of the affected wallet addresses on the Wormhole website confirmed that the team had swiftly addressed the issue and removed them from the eligibility list. The Solana Block Explorer has also flagged the four wallets for their involvement in the 2022 breach, providing further evidence of their malicious intent.

然而，随后对 Wormhole 网站上受影响的钱包地址进行的检查证实，该团队已迅速解决了该问题并将其从资格列表中删除。 Solana Block Explorer 还标记了这四个钱包参与了 2022 年的泄露事件，为他们的恶意意图提供了进一步的证据。

The Wormhole hack remains a pivotal event in the history of cryptocurrency, with the stolen funds ranking among the largest breaches in the sector. The incident prompted a counter-exploit by decentralized finance platform Oasis.app and infrastructure firm Jump Crypto, which successfully recovered approximately $225 million in digital assets from the hacker.

虫洞黑客事件仍然是加密货币历史上的一个关键事件，被盗资金被列为该行业最大的违规事件之一。该事件引发了去中心化金融平台 Oasis.app 和基础设施公司 Jump Crypto 的反利用，成功从黑客手中追回约 2.25 亿美元的数字资产。

Wormhole's decision to distribute over 617 million W tokens to eligible users has raised concerns regarding potential security risks. Blockchain sleuth ZachXBT on X has issued warnings about the proliferation of scammers and hackers exploiting the airdrop to target unsuspecting users.

Wormhole 决定向符合条件的用户分发超过 6.17 亿个 W 代币，引发了人们对潜在安全风险的担忧。 X 上的区块链侦探 ZachXBT 已就利用空投攻击毫无戒心的用户的诈骗者和黑客泛滥发出警告。

ZachXBT has identified numerous fake X handles sporting gold checkmarks, commonly associated with verified accounts. He emphasizes that these handles are often used by scammers to lure users into clicking phishing links, potentially exposing them to financial loss.

ZachXBT 已识别出许多带有金色复选标记的假 X 手柄，这些手柄通常与经过验证的帐户相关。他强调，诈骗者经常使用这些句柄来引诱用户点击网络钓鱼链接，从而可能使他们蒙受经济损失。

Wormhole's prompt removal of the compromised wallets from the airdrop eligibility list has mitigated the potential impact of this security lapse. However, the broader concerns raised by the airdrop and the ongoing presence of malicious actors underscore the critical importance of vigilance and caution within the cryptocurrency community.

Wormhole 迅速将受感染的钱包从空投资格列表中删除，减轻了这一安全漏洞的潜在影响。然而，空投引发的更广泛担忧以及恶意行为者的持续存在凸显了加密货币社区内保持警惕和谨慎的至关重要性。