馬特·弗里（Matt Furie），黑客和朝鮮：Web3世界中的糾結網絡

最近針對與青蛙創作者馬特·弗里（Matt Furie）佩佩（Pepe）以及伊朗加密貨幣交易所Nobitex漏洞的項目有關的黑客攻擊，揭示了複雜的方案和潛在的朝鮮參與。

Matt Furie, Hacking, and DPRK: A Tangled Web in the Web3 World

馬特·弗里（Matt Furie），黑客和朝鮮：Web3世界中的糾結網絡

The crypto world moves fast, and sometimes it takes unexpected turns. Recently, the intersection of meme culture, NFT projects, and alleged North Korean cyber activity has created a particularly bizarre and concerning narrative. Let’s dive in.

加密世界的移動很快，有時會出乎意料的轉彎。最近，模因文化，NFT項目和所謂的朝鮮網絡活動的交匯處引起了人們對敘述的特別奇怪和奇怪的。讓我們潛水。

The Replicandy Debacle and the Matt Furie Connection

複製的崩潰和馬特·弗里連接

Matt Furie, the artist behind the iconic Pepe the Frog meme, hasn't had the best luck lately with his NFT ventures. His 'Replicandy' collection, launched in June, suffered a major blow when a hacker exploited a vulnerability, minting thousands of new NFTs and tanking the floor price by a staggering 97%. Ouch.

標誌性的佩佩（Pepe the Frog Meme）背後的藝術家馬特·弗里（Matt Furie）最近對他的NFT冒險並沒有祝您好運。他的“複製”系列於6月推出，當黑客剝削脆弱性，造成數千個新的NFT並使地板價格驚人的97％時，遭受了重大打擊。哎喲。

But it gets weirder. Blockchain investigator ZachXBT uncovered a potential link between the Replicandy exploit and a broader hacking campaign, pointing fingers at... North Korea.

但這變得怪異。區塊鏈調查員Zachxbt發現了複製品漏洞和更廣泛的黑客運動之間的潛在聯繫，將手指指向...朝鮮。

DPRK IT Workers and the Web3 Infiltration

DPRK IT工人和Web3滲透

ZachXBT's investigation suggests that North Korean IT workers, likely hired unknowingly as developers, may be behind the attacks on Replicandy, as well as other projects like Favrr, Hedz and Zogz. The attacker gained control of the key contracts and initiated a second token issuance and dumped them into the liquidity pool, causing a sharp collapse in the floor price.

ZachXBT的調查表明，朝鮮IT工人可能在不知不覺中以開發人員的身份僱用，可能是對複製品的攻擊以及其他項目，以及Favrr，Hedz和Zogz。攻擊者獲得了對關鍵合同的控制權，並開始了第二次令牌發行，並將其傾倒到流動性池中，從而導致地板價格急劇下降。

The Favrr project, a Web3 marketplace, experienced a similar exploit, with over $680,000 siphoned off. Funds were traced to addresses associated with potential payments to DPRK IT specialists. GitHub profiles with suspicious activity – Korean language settings, VPN usage, mismatched time zones – further fueled the suspicion.

Web3市場FAVRR項目經歷了類似的利用，超過680,000美元。資金可追溯到與向朝鮮IT專家付款相關的地址。具有可疑活動的GitHub概況 - 韓國語言設置，VPN使用情況，不匹配的時區 - 進一步加劇了懷疑。

On-Chain Evidence and the Nobitex Hack

鏈上的證據和Nobitex Hack

The investigation revealed a network of addresses used to consolidate and route funds to centralized exchanges, with some flows indicating a persistent compensation system for the alleged ITW group. Also, Iranian cryptocurrency exchange Nobitex suffered a breach, with onchain data revealing that around $82 million was siphoned from its reserves. A hacker collective calling itself Predatory Sparrow has claimed responsibility for the coordinated hit on the centralized exchange (CEX).

調查顯示，用於合併和路線資金到集中交易所的地址網絡，其中一些流動表明對所謂的ITW集團有持續的補償系統。此外，伊朗加密貨幣交易所遭受了違規，onChain數據表明，從其儲備中偷走了約8200萬美元。一個hacker的集體稱為掠奪性麻雀，聲稱對集中式交易所（CEX）的協調命中率負責。

Why This Matters

為什麼這很重要

This situation highlights the growing threat of sophisticated cyberattacks targeting the Web3 space. With more money flowing into crypto, it's becoming an increasingly attractive target for malicious actors, including nation-state-backed groups. The alleged involvement of North Korean hackers demonstrates a systemic approach to infiltrating projects by posing as developers. So, the web3 builders must be extremely vigilant when designing security architectures, and calls users to exercise maximum caution.

這種情況凸顯了針對Web3空間的複雜網絡攻擊的日益增長的威脅。隨著更多的錢流入加密貨幣，它已成為包括民族國家支持團體在內的惡意演員的越來越有吸引力的目標。所謂的朝鮮黑客參與表明，通過擺姿勢作為開發商，一種系統的滲透項目方法。因此，在設計安全體系結構時，Web3構建器必須非常警惕，並呼籲用戶最大程度地謹慎。

Final Thoughts

最後的想法

From Pepe memes to potential North Korean hacking rings, the crypto world is never short on surprises. It's a wild, wild west out there, folks. So buckle up, stay vigilant, and maybe double-check who you're hiring as a developer. You never know where they might actually be logging in from!

從佩佩模因到潛在的朝鮮黑客戒指，加密貨幣世界永遠不會缺乏驚喜。伙計們，這是一個狂野的西部。因此，搭扣，保持警惕，也許是雙重檢查您作為開發人員僱用的人。您永遠不知道它們實際上可能從哪裡登錄！