FixFloat 交易所遭駭客攻擊，以太坊、Tron 損失 300 萬美元

基於比特幣閃電網路的交易所 FixFloat 揭露了一個安全漏洞，導致未經授權的交易和重大財務損失。這次攻擊涉及將數百萬美元的 ETH 和 USDT 轉移到外部錢包，引發了調查並引發了對該平台安全措施的擔憂。 FixFloat 強調其致力於加強保護和調查該事件，而加密貨幣社群正在等待進一步的細節和分析。

FixedFloat Breach Highlights Ongoing Security Challenges for Crypto Exchanges

FixFloat 漏洞凸顯了加密貨幣交易所持續面臨的安全挑戰

A recent security breach at FixedFloat, a Bitcoin Lightning-based exchange, has once again raised concerns about the vulnerability of crypto exchanges to cyberattacks. The incident, which resulted in the unauthorized transfer of over $3 million in assets, has sparked a thorough investigation by both the exchange and external security firms.

基於比特幣閃電網路的交易所FixedFloat最近發生的安全漏洞再次引發了人們對加密貨幣交易所容易遭受網路攻擊的擔憂。該事件導致超過 300 萬美元的資產未經授權轉移，引發了交易所和外部安全公司的徹底調查。

According to CertiK, a leading blockchain security firm, the stolen funds were transferred in ether (ETH) and tether (USDT) to wallets on the Ethereum and Tron networks. The pattern of the transactions bore a striking resemblance to an earlier attack on FixedFloat in February, suggesting a potential weakness in the system or its related third-party services.

據領先的區塊鏈安全公司 CertiK 稱，被盜資金以以太坊 (ETH) 和泰達幣 (USDT) 的形式轉移到以太坊和 Tron 網路上的錢包。這些交易的模式與 2 月對固定浮動 (FixedFloat) 的早期攻擊極為相似，表明該系統或其相關第三方服務存在潛在弱點。

In response to the breach, FixedFloat shut down its website for "technical maintenance," leaving users without access to their accounts or information for an extended period. The exchange later confirmed the attack and detailed the measures it had taken to address the situation.

為了應對此次洩露，FixedFloat 關閉了其網站進行“技術維護”，導致用戶在很長一段時間內無法存取其帳戶或資訊。該交易所後來證實了這次攻擊，並詳細說明了解決這一情況的措施。

"We are deeply committed to the protection of our infrastructure and the continuous improvement of our security measures against such attacks," FixedFloat stated in a public announcement. "We have invested heavily in security enhancements and will continue to do so to ensure the safety of our users' assets."

「我們堅定地致力於保護我們的基礎設施，並不斷改進我們針對此類攻擊的安全措施，」FixedFloat 在公開聲明中表示。 “我們在安全增強方面投入了大量資金，並將繼續這樣做，以確保用戶資產的安全。”

FixedFloat also reassured its clients that the stolen funds were company reserves and that the assets held or transacted via the service remained safe, as the exchange operates on a non-custodial basis, meaning it does not hold user funds in its own wallets.

FixFloat 也向客戶保證，被盜資金是公司儲備，透過該服務持有或交易的資產仍然安全，因為該交易所在非託管基礎上運營，這意味著它不會在自己的錢包中持有用戶資金。

However, the recurrent nature of the security breaches at FixedFloat has raised doubts about the adequacy of the corrective action measures taken after the first incident. Security experts and industry observers are closely monitoring the situation, expressing concerns about the challenges exchanges face in protecting themselves from sophisticated cyber threats.

然而，FixedFloat 安全漏洞的反覆出現引起了人們對第一次事件後採取的糾正措施是否充分的懷疑。安全專家和產業觀察家正在密切關注事態發展，並對交易所在保護自己免受複雜網路威脅方面面臨的挑戰表示擔憂。

The incident highlights the ongoing need for crypto exchanges to invest in robust security measures and adopt best practices to prevent such attacks. It also underscores the importance of regular security audits and incident response plans to minimize the impact of breaches and maintain user confidence in the industry.

該事件凸顯了加密貨幣交易所持續需要投資於強有力的安全措施並採用最佳實踐來防止此類攻擊。它還強調了定期安全審核和事件回應計劃的重要性，以最大限度地減少違規影響並保持用戶對行業的信心。

As the investigation continues, it remains to be seen what specific vulnerabilities were exploited by the attackers and what lessons can be learned to prevent similar incidents in the future. The crypto community will be watching closely for updates and any regulatory actions that may result from the breach.

隨著調查的持續，攻擊者利用了哪些具體漏洞以及可以學到哪些教訓來防止未來發生類似事件仍有待觀察。加密貨幣社群將密切關注更新以及可能因違規行為而導致的任何監管行動。