繫繩的凍結機制中可利用的時間滯後允許非法演員繞過執法

最近的一份報告暴露了Tether的凍結機制的關鍵脆弱性，使非法行為者繞過執法。區塊鏈分析公司Amlbot透露，有170個錢包利用了凍結動作的時間滯後。

A recent report by blockchain analytics firm AMLBot has exposed a critical vulnerability in Tether’s freeze mechanism, allowing illicit actors to bypass enforcement. The report, titled "Chaining Together: How 170 Wallets Exploited Tether’s Freeze Lag to Deflect Enforcement and Move Nearly $78 Million," details how 170 wallets exploited the time lag in freezing actions to move funds across Ethereum and Tron networks before blocks took effect.

區塊鏈分析公司Amlbot的最新報告暴露了Tether的凍結機制的關鍵脆弱性，使非法參與者繞過執法。該報告的標題為“鏈在一起：170個錢包如何利用Tether的凍結滯後來偏轉執法並移動近7800萬美元”，詳細介紹了170個錢包如何利用凍結行動的時間滯後，以將資金跨越以太坊和Tron Network移動，而Tron Network則在街區之前發揮了作用。

Tron Network Enables $49.6M in Illicit Withdrawals

TRON網絡可實現4960萬美元的非法提款

The analysis showed that Tether’s freeze mechanism on Tron suffers from an operational lag due to its multi-signature governance, which requires multiple approvals before a freeze is enforced. This structure created a delay window of up to 60 minutes during which wallet owners could move funds out before the enforcement locks the assets.

分析表明，Tether對Tron的凍結機制由於其多簽名治理而遭受了操作滯後，該治理需要在強制凍結之前進行多次批准。該結構創建了一個最多60分鐘的延遲窗口，在該窗口中，錢包所有者可以在執行鎖定資產之前將資金移出。

Researchers confirmed that 170 out of 3,480 blacklisted wallets took advantage of the time gap, each making up to three transactions. The average withdrawn amount reached $291,970 per wallet, while the median was $65,370. Most exploiters used real-time monitoring to detect freeze requests and acted before completion.

研究人員確認，在3,480個黑名單的錢包中，有170個利用了時間差距，每次都彌補了三筆交易。平均撤銷金額達到每個錢包291,970美元，中位數為65,370美元。大多數利用者使用實時監控來檢測凍結請求並在完成之前採取行動。

The report noted that $49.6 million was successfully withdrawn from the Tron network by accounts flagged for suspicious activity. While Tether’s contract design secures against unilateral actions, it introduced the vulnerability. AMLBot stated that criminals used automated tools to monitor Tether’s contract interactions to avoid the freeze.

該報告指出，4,960萬美元被標記為可疑活動的帳戶成功從TRON網絡撤回。儘管Tether的合同設計確保了單方面的行動，但它引入了脆弱性。 Amlbot表示，罪犯使用自動工具來監視Tether的合同互動以避免凍結。

Ethereum Network Hit as Freeze Timing Fails to Prevent $28.5M Exit

以太坊網絡命中，因為凍結時間無法防止2850萬美元出口

Tether’s delay in enforcing blacklists affected Ethereum as well, with bad actors withdrawing $28.5 million during freeze windows. Tron wallets received early alerts on freeze transactions and responded swiftly before enforcement. The lag again stemmed from the multi-signature system required sign-offs from different parties.

系特特（Tether）在強制執行黑名單的延遲也影響了以太坊，而《冰凍窗戶》（Freeze Windows）期間不好的演員撤回了2850萬美元。 Tron錢包收到了凍結交易的提前警報，並在執行前迅速做出了回應。滯後再次源於多方面的多簽名系統所需的簽名。

AMLBot’s report suggested that bots monitored Tether’s smart contracts and alerted wallet holders when initiating freeze attempts. This tactic gave bad actors a crucial advantage on Ethereum’s fast-moving network. On-chain behavior indicated that automation was in play, even if the bots were not directly observed.

Amlbot的報告建議，機器人在啟動凍結嘗試時監視了Tether的智能合約和警告錢包持有者。這種策略使壞演員在以太坊快速移動網絡上具有至關重要的優勢。鏈上的行為表明自動化正在起作用，即使沒有直接觀察到機器人。

Security firm PeckShield reviewed the findings and confirmed the structural vulnerability in the freeze delay process. The firm clarified that the issue lies in the process, not the

安全公司Peckshield審查了調查結果，並確認了凍結延遲過程中的結構脆弱性。該公司澄清了該問題在於該過程，而不是

Tether’s Shapeshifting: A Critical Look at the Stablecoin Giant

繫繩的變形：對穩定巨人的批判性看

ownederu vanguru

旗幟