dYdX Hack：交易所應對涉及其 v3 協議的安全漏洞

dYdX 是一家著名的去中心化交易所，正在努力解決涉及其 v3 協議的重大安全漏洞問題。 7 月 23 日，據報道，攻擊者透過安裝代幣耗盡程序破壞了 dYdX v3 的官方網站，這可能會竊取用戶的資金。

DeFi MarketsdYdX Layer 2 Web3 Markets

DeFi 市場dYdX Layer 2 Web3 市場

dYdX Grapples with Security Breach on v3 Protocol Affecting User Funds

dYdX 努力應對影響用戶資金的 v3 協議安全漏洞

Prominent decentralized exchange dYdX is facing a critical security breach on its v3 protocol, putting users’ funds at risk.

著名的去中心化交易所 dYdX 的 v3 協議面臨嚴重的安全漏洞，使用戶的資金面臨風險。

On July 23, it was reported that an attacker compromised the official website for dYdX v3, installing a token-draining program capable of siphoning off users’ funds.

7 月 23 日，據報道，攻擊者入侵了 dYdX v3 的官方網站，安裝了一個能夠吸走用戶資金的代幣耗盡程式。

The compromised site displayed error messages akin to those used in previous phishing scams, attempting to deceive users into revealing their wallet information.

受感染的網站顯示與先前網路釣魚詐騙中使用的錯誤訊息類似的錯誤訊息，試圖欺騙用戶洩露他們的錢包資訊。

According to initial reports, the attacker's primary goal was to drain users' funds through the installation of a malicious script on the exchange's website. This script intercepted users' attempts to withdraw funds and redirected them to the attacker's wallet address.

根據初步報告，攻擊者的主要目標是透過在交易所網站上安裝惡意腳本來耗盡用戶的資金。該腳本攔截用戶提取資金的嘗試，並將其重定向到攻擊者的錢包地址。

The exchange's team swiftly issued a warning on social media, advising users not to visit the affected site or click any links associated with it until further notice.

該交易所團隊迅速在社交媒體上發出警告，建議用戶不要訪問受影響的網站或點擊與其相關的任何鏈接，直至另行通知。

“Critical update: dydx . exchange is compromised, do not visit or click any links on the site,” the exchange tweeted.

“重要更新：dydx。交易所已受到威脅，請勿訪問或點擊該網站上的任何連結。

“An attacker installed a token-draining program on the site. The protocol smart contracts are not compromised.”

「攻擊者在網站上安裝了令牌耗盡程式。協議智能合約不會受到損害。

Fortunately, the protocol's v4 version, which operates on the Cosmos blockchain, is not affected by this breach and remains fully operational.

幸運的是，在 Cosmos 區塊鏈上運行的該協議的 v4 版本並未受到此漏洞的影響，並且仍然完全正常運作。

The dYdX v3 interface, accessible through dydx.exchange, was the primary target of this attack. According to dYdX, the smart contracts underpinning the v3 protocol were not compromised.

可透過 dydx.exchange 存取的 dYdX v3 介面是此次攻擊的主要目標。據 dYdX 稱，支撐 v3 協議的智能合約並未受到損害。

The smart contracts on dYdX v3 are safe, and are not compromised.

dYdX v3 上的智能合約是安全的，不會受到損害。

Do not attempt to withdraw any funds or interact with the website dydx . exchange until further update.

請勿嘗試提取任何資金或與 dydx 網站互動。交流直至進一步更新。

This breach comes at a turbulent time for dYdX, with the exchange reportedly in talks to sell its derivatives trading arm.

這次違規事件發生在 dYdX 正處於動盪時期，據報道該交易所正在就出售其衍生性商品交易部門進行談判。

Wintermute Trading and Selini Capital have emerged as potential buyers for this arm.

Wintermute Trading 和 Selini Capital 已成為該部門的潛在買家。

Based in the U.K., Wintermute is known for its algorithmic trading in digital assets, while Selini focuses on managing alternative investments in digital assets.

Wintermute 總部位於英國，以其數位資產演算法交易而聞名，而 Selini 則專注於管理數位資產的另類投資。

This move follows the recent departure of dYdX's founder, Antonio Juliano, who stepped down as CEO on May 13. The company is now led by Ivo Crnkovic-Rubsamen, the former chief strategy officer.

此前，dYdX 創辦人 Antonio Juliano 最近已於 5 月 13 日辭去執行長一職。

In other news, dYdX launched its v5 version in June, introducing new features like isolated margin and markets, and support for Raydium Markets.

在其他消息中，dYdX 於 6 月推出了 v5 版本，引入了獨立保證金和市場等新功能，以及對 Raydium 市場的支援。

These upgrades allow traders to assign collateral to specific trades, mitigating cross-trade collateral risk and providing dedicated insurance for each collateral pool.

這些升級允許交易者為特定交易分配抵押品，降低跨交易抵押品風險，並為每個抵押品池提供專門的保險。

The dYdX v3 breach highlights a worrying trend in the Web3 space, with DNS hijacking attacks becoming increasingly common.

dYdX v3 漏洞凸顯了 Web3 領域令人擔憂的趨勢，DNS 劫持攻擊變得越來越普遍。

Earlier this month, both Compound Finance and Celer Network experienced similar attacks, which redirected their websites to malicious domains designed to drain user tokens.

本月早些時候，Compound Finance 和 Celer Network 都經歷了類似的攻擊，這些攻擊將其網站重定向到旨在耗盡用戶代幣的惡意網域。

As dYdX continues to navigate this challenging period, the focus will be on resolving the breach swiftly and effectively. The exchange's native token has already taken a hit, reporting a 10% decrease at press time.

隨著 dYdX 繼續度過這一充滿挑戰的時期，重點將是迅速有效地解決違規問題。該交易所的原生代幣已經受到打擊，截至發稿時已下跌 10%。