MakerDAO 治理代表因網路釣魚攻擊損失 1,100 萬美元

MakerDAO 治理代表遭遇複雜的網路釣魚攻擊，導致價值 1,100 萬美元的 Aave Ethereum Maker (aEthMKR) 和 Pendle USDe 代幣被盜。

A MakerDAO governance delegate has fallen prey to a phishing attack, leading to the theft of $11 million in Aave Ethereum Maker (aEthMKR) and Pendle USDe tokens.

MakerDAO 治理代表遭遇網路釣魚攻擊，導致價值 1,100 萬美元的 Aave Ethereum Maker (aEthMKR) 和 Pendle USDe 代幣被盜。

The compromised assets were swiftly transferred from the delegate's address, 0xfb94d3404c1d3d9d6f08f79e58041d5ea95accfa, to the scammer's address, 0x739772254924a57428272f429bd55f30eb36bb96, with the transaction confirmed in merely 11 seconds. This governance delegate played a crucial role in MakerDAO, a decentralized finance (DeFi) platform, impacting significant decision-making processes.

被盜資產迅速從受託人的地址 0xfb94d3404c1d3d9d6f08f79e58041d5ea95accfa 轉移到詐騙者的地址 0x73972254924a57428272f429bd55f3008f79e58041d5ea95accfa 轉移到詐騙者的地址 0x73972254924a57428272f429bd55f3013601336063336029bd5bb，僅得到了交易。這位治理代表在去中心化金融 (DeFi) 平台 MakerDAO 中發揮了至關重要的作用，影響了重大決策過程。

Within MakerDAO, governance delegates hold great responsibility, participating in voting on various proposals that influence the protocol's development and operations. They engage in polls and executive votes that ultimately decide the implementation of new measures into the Maker protocol. Typically, MakerDAO tokenholders and delegates advance proposals from initial polls to final executive votes, followed by a security waiting period known as the Governance Security Module (GSM) to ensure stability and prevent abrupt changes.

在 MakerDAO 中，治理代表承擔重大責任，參與對影響協議開發和營運的各種提案進行投票。他們參與民意調查和行政投票，最終決定在 Maker 協議中實施新措施。通常，MakerDAO 代幣持有者和代表會提出從最初民意調查到最終執行投票的提案，然後是稱為治理安全模組（GSM）的安全等待期，以確保穩定性並防止突然變化。

Rising Threat of Phishing Scams

網路釣魚詐騙的威脅不斷上升

In recent news, Cointelegraph reported on the increasing prevalence of approval phishing tactics employed by scammers. These scams aim to trick users into authorizing transactions that grant attackers access to their wallets, enabling them to pilfer funds. According to Chainalysis, such methods, often utilized by “pig-butchering” scammers, are on the rise.

在最近的新聞中，Cointelegraph 報導，詐騙者採用的批准網路釣魚策略越來越普遍。這些詐騙旨在誘騙用戶授權交易，從而使攻擊者能夠存取他們的錢包，從而竊取資金。據 Chainaanalysis 稱，「殺豬」詐騙者經常使用的此類方法正在增加。

Phishing scams involve deceivers posing as trustworthy entities to extract sensitive information from victims. In this case, the governance delegate was deceived into signing multiple phishing signatures, which ultimately facilitated the asset theft.

網路釣魚詐騙涉及欺騙者冒充可信任實體從受害者那裡提取敏感資訊。在本例中，治理代表被欺騙簽署了多個釣魚簽名，最終促成了資產被盜。

Earlier in 2024, Scam Sniffer reported that phishing scams resulted in the loss of $300 million from 320,000 users in 2023 alone. One of the most severe incidents documented involved a single victim losing $24.05 million due to various phishing techniques, including permit, permit 2, approve, and increase allowance.

2024 年初，Scam Sniffer 報告稱，光是 2023 年，網路釣魚詐騙就導致 32 萬用戶損失 3 億美元。記錄的最嚴重事件之一涉及一名受害者因各種網路釣魚技術（包括許可、許可 2、批准和增加津貼）而損失 2405 萬美元。