兩兄弟因複雜的價值 2500 萬美元的以太坊漏洞被起訴

據稱，Anton 和 James Peraire-Bueno 兄弟利用流行的以太坊軟體中的漏洞執行了一項複雜的詐欺計劃。美國檢察官聲稱，他們針對有爭議的 MEV 做法（最大可提取價值）來操縱區塊鏈交易，並在一次攻擊中淨賺 2500 萬美元，該攻擊被描述為操縱既定規則並違反既定法律。

Unveiling a Sophisticated $25 Million Ethereum Exploit: Two Brothers Mastermind an Elaborate Scheme

揭開價值 2500 萬美元的複雜以太坊漏洞利用：兩兄弟精心策劃的計劃

In a daring heist that has sent shockwaves through the cryptocurrency industry, two brothers have been indicted for exploiting a vulnerability in a popular software used by trading bots on the Ethereum blockchain, netting an estimated $25 million in illicit gains in a matter of seconds.

在一場震驚整個加密貨幣行業的大膽搶劫中，兩兄弟因利用以太坊區塊鏈上交易機器人使用的流行軟體中的漏洞而被起訴，在幾秒鐘內獲得了估計2500 萬美元的非法收益。

According to an indictment unsealed by the United States Department of Justice, brothers Anton Peraire-Bueno, 24, and James Peraire-Bueno, 28, meticulously planned and executed a four-step exploit known as "The Bait," "Unblinding the block," "The Search," and "The Propagation." Their intricate scheme targeted the realm of maximal extractable value (MEV), a controversial practice that allows validators and builders to extract value from users by reordering or inserting transactions in a block before it is added to the blockchain.

根據美國司法部公佈的起訴書，24 歲的安東·佩雷爾-布埃諾(Anton Peraire-Bueno) 和28 歲的詹姆斯·佩雷爾-布埃諾(James Peraire-Bueno) 兄弟精心策劃並執行了一項名為“誘餌”的四步攻擊，“揭開區塊的盲點， ““搜索”和“傳播”。他們複雜的計劃針對的是最大可提取價值（MEV）領域，這是一種有爭議的做法，允許驗證者和構建者在將交易添加到區塊鏈之前通過在區塊中重新排序或插入交易來從用戶那裡提取價值。

MEV-Boost, a software program used by an overwhelming majority of Ethereum validators, serves as a mitigating strategy to ensure more equitable distribution of MEV. However, the Peraire-Bueno brothers exploited a vulnerability in this software, enabling them to access transactions in blocks before they were officially sent to validators. They targeted three MEV bots lacking specific checks and deployed 16 validators designed to lure these bots into their trap.

MEV-Boost 是絕大多數以太坊驗證者使用的軟體程序，可作為一種緩解策略，以確保更公平地分配 MEV。然而，Peraire-Bueno 兄弟利用了該軟體中的一個漏洞，使他們能夠在區塊中的交易正式發送給驗證器之前訪問它們。他們針對三個缺乏特定檢查的 MEV 機器人，並部署了 16 個驗證器，旨在引誘這些機器人落入陷阱。

The brothers' malicious validators seized the opportunity to exploit the bots' vulnerability by pulling apart bundled transactions, which typically execute automatically in fractions of seconds. By exploiting the absence of certain checks in the targeted bots, the brothers gained access to signed transactions, allowing them to manipulate these transactions and drain the bots of $25 million.

兄弟倆的惡意驗證者抓住機會，透過拆散捆綁交易來利用機器人的漏洞，這些交易通常會在幾分之一秒內自動執行。透過利用目標機器人中某些檢查的缺失，兄弟倆獲得了簽名交易的存取權限，從而可以操縱這些交易並從機器人中榨取 2500 萬美元。

The government's indictment strongly asserts that the brothers' actions breached established community norms and ventured into the realm of fraud. They are accused of sending "false signatures" to a crucial player in the blockchain known as a "relay" to prematurely release the full content of proposed blocks, including the private transaction information. As Blocknative CEO Matt Cutler aptly put it, "Stealing is stealing, regardless of the terms that enable that stealing."

政府的起訴書強烈主張兄弟倆的行為違反了既定的社區規範，並冒險進入詐欺領域。他們被指控向區塊鏈中被稱為“中繼”的關鍵參與者發送“虛假簽名”，以過早發布擬議區塊的全部內容，包括私人交易資訊。正如 Blocknative 執行長 Matt Cutler 恰當地說的那樣，“偷竊就是偷竊，無論使用什麼條款來實現這種偷竊。”

The indictment details the brothers' extensive research and planning, as well as their subsequent attempts to conceal their activities. Internet searches for "top crypto lawyers," "wire fraud statute of limitations," and "fraudulent Ethereum addresses database" underscore their awareness of the seriousness of their actions. Additionally, James Peraire-Bueno's request for a safe deposit box large enough to fit a laptop raises further suspicion.

起訴書詳細描述了兄弟倆的廣泛研究和計劃，以及他們隨後試圖隱藏其活動的情況。網路上搜尋「頂級加密律師」、「電匯詐欺時效」和「欺詐性以太坊地址資料庫」突顯了他們對其行為嚴重性的認識。此外，詹姆斯·佩雷爾-布埃諾 (James Peraire-Bueno) 要求提供一個足夠大以容納筆記型電腦的保險箱，這引發了進一步的懷疑。

The Ethereum ecosystem has been marred by various controversial MEV trading practices, but many leading figures view this particular exploit as pure theft. Taylor Monahan, a lead product manager at MetaMask, emphasized that stealing and laundering millions of dollars should be met with severe consequences.

以太坊生態系統因各種有爭議的 MEV 交易行為而受到損害，但許多領先人物認為這種特殊的利用純粹是盜竊。 MetaMask 首席產品經理 Taylor Monahan 強調，盜竊和洗錢數百萬美元應該面臨嚴重後果。

The indictment serves as a stark reminder of the growing sophistication of cryptocurrency-related crime and the need for vigilance in protecting digital assets. As the industry evolves, law enforcement agencies will undoubtedly face increasing challenges in combating these increasingly complex schemes.

該起訴書清楚地提醒人們，與加密貨幣相關的犯罪日益複雜，並且需要保持警惕保護數位資產。隨著行業的發展，執法機構在打擊這些日益複雜的計劃時無疑將面臨越來越多的挑戰。