Indodax 遭受 2200 萬美元的加密貨幣駭客攻擊

在幾種加密貨幣損失近 2200 萬美元後，印尼加密貨幣交易所 Indodax 停止了其網路和行動應用程式以調查這次駭客攻擊。

Indonesia's largest crypto exchange, Indodax, has gone offline after a $22 million hack, prompting an urgent investigation into the breach that hit hot wallets on multiple blockchain networks.

印尼最大的加密貨幣交易所 Indodax 在遭受價值 2,200 萬美元的駭客攻擊後已下線，促使對多個區塊鏈網路上的熱錢包遭受的漏洞進行緊急調查。

Indodax Hit by $22M Crypto Hack

Indodax 遭受 2200 萬美元加密貨幣駭客攻擊

Indonesian crypto exchange Indodax has halted its web and mobile applications to look into the hack after losing nearly $22 million in various cryptocurrencies.

印尼加密貨幣交易所 Indodax 在損失了近 2,200 萬美元的各種加密貨幣後，已停止其網路和行動應用程式以調查此次駭客攻擊。

Multiple blockchain research firms, including PeckShield, SlowMist, and Cyvers, had raised the alarm on September 11 about a possible attack on Indodax’s hot wallets. The attacker managed to drain substantial amounts of tokens including Bitcoin, Tron, Ether, and Polygon, Cointelegraph reported.

包括 PeckShield、SlowMist 和 Cyvers 在內的多家區塊鏈研究公司於 9 月 11 日就 Indodax 熱錢包可能遭受的攻擊發出警報。根據 Cointelegraph 報道，攻擊者成功竊取了大量代幣，包括比特幣、Tron、以太幣和 Polygon。

According to SlowMist’s analysis, the attacker was able to exploit a vulnerability in Indodax’s withdrawal system, gaining access to the exchange's hot wallet and moving the funds. However, Cyvers suggested that the signature machine and other systems were compromised.

根據慢霧的分析，攻擊者能夠利用 Indodax 提現系統中的漏洞，存取該交易所的熱錢包並轉移資金。然而，Cyvers 表示簽章機和其他系統受到了損害。

The hacker drained the Optimism blockchain of over $1.42 million in Bitcoin, Tron tokens worth $2.4 million, ERC-20 tokens valued at over $14.6 million, POL tokens worth $2.58 million, and ETH tokens valued at $0.9 million.

駭客從Optimism 區塊鏈上竊取了超過142 萬美元的比特幣、價值240 萬美元的Tron 代幣、價​​值超過1460 萬美元的ERC-20 代幣、價​​值258 萬美元的POL 代幣和價值90 萬美元的ETH 代幣。

Hacker Converted Stolen Tokens to Ether

駭客將被盜的代幣轉換為以太幣

Cyvers’ analysis noted that the attacker proceeded to convert the tokens to Ether after detecting over 150 suspicious transactions on multiple networks. Hackers typically use crypto mixing services like Tornado Cash to launder the funds after converting them to ETH.

Cyvers 的分析指出，攻擊者在多個網路上偵測到超過 150 筆可疑交易後，開始將代幣轉換為以太幣。駭客通常使用 Tornado Cash 等加密貨幣混合服務將資金轉換為 ETH 後進行洗錢。

Shortly after the hack warnings, Indodax acknowledged the attack and notified users about the temporary suspension of services.

在駭客警告發出後不久，Indodax 承認了這次攻擊，並通知用戶暫時停止服務。

“Currently, we are conducting a complete maintenance to ensure the entire system is operating properly. During this maintenance process, the INDODAX web platform and application are temporarily inaccessible,” the company stated.

「目前，我們正在進行全面維護，以確保整個系統正常運作。在此維護過程中，INDODAX 網路平台和應用程式暫時無法存取。

However, the crypto exchange assured investors that their crypto holdings were safe.

然而，加密貨幣交易所向投資者保證他們持有的加密貨幣是安全的。

Lazarus Group Suspected in Indodax Hack

Lazarus 集團涉嫌參與 Indodax 駭客攻擊

Cyvers’ Head of AI, Yosi Hammer, has suspicions that the infamous Lazarus Group, a collective linked to North Korea, might be involved.

Cyvers 的人工智慧主管 Yosi Hammer 懷疑臭名昭著的 Lazarus Group（一個與北韓有聯繫的組織）可能參與其中。

“The pattern and the characteristics of the (Indodax) attack highly resemble those of North Korea’s Lazarus Group,” he told BSCN.

「（Indodax）攻擊的模式和特徵與北韓 Lazarus 組織的攻擊非常相似，」他告訴 BSCN。

According to data from CoinMarketCap, Indodax has $369 million in reserves, which could be used to compensate investors for their losses.

根據 CoinMarketCap 的數據，Indodax 擁有 3.69 億美元的儲備金，可用於補償投資者的損失。