Polygon (MATIC) 第 2 層網路在遭到駭客攻擊後重新獲得對 Discord 通道的控制

以太坊第 2 層網路 Polygon 宣布，在最近遭受駭客攻擊後，它已重新獲得對其 Discord 通道的控制權。

Polygon, an Ethereum Layer-2 network, has announced that it has regained control of its Discord channel following a recent hack.

以太坊第 2 層網路 Polygon 宣布，在最近遭受駭客攻擊後，它已重新獲得對其 Discord 通道的控制權。

Earlier today, the network reported that the Discord channel had been compromised, exposing users to phishing attacks that led to significant losses. Now, Mudit Gupta, Polygon’s Chief Information Security Officer, reported that the network had regained control of the channel a few hours after its compromise. According to him, the security team is working to reverse any changes made by the hacker. However, he did not disclose specific details about the hack or the recovery process.

今天早些時候，該網路報告稱 Discord 頻道已被入侵，使用戶面臨網路釣魚攻擊，導致重大損失。現在，Polygon 首席資訊安全官穆迪特古普塔 (Mudit Gupta) 報告稱，該網路在遭到入侵後幾個小時就重新獲得了對該頻道的控制權。據他介紹，安全團隊正在努力扭轉駭客所做的任何更改。不過，他並未透露有關駭客攻擊或復原過程的具體細節。

Available information shows that attackers exploited the increased interest in Polygon’s upcoming migration from MATIC to the new Polygon Ecosystem Token (POL). They used the compromised Discord channel to promote phishing links disguised as fake POL airdrop announcements, targeting users eager to participate in the migration.

現有資訊顯示，攻擊者利用了人們對 Polygon 即將從 MATIC 遷移到新的 Polygon 生態系統代幣 (POL) 的興趣增加。他們利用受損的 Discord 管道傳播偽裝成虛假 POL 空投公告的網絡釣魚鏈接，目標是渴望參與遷移的用戶。

Polygon announced that the planned migration will begin on September 4. Meanwhile, the Discord hack raised concerns about Polygon’s security measures. Gupta noted that the network had secured all privileged accounts with two-factor authentication (2FA). This suggests that the breach occurred despite these protections.

Polygon 宣布計劃於 9 月 4 日開始遷移。古普塔指出，該網路已透過雙重認證（2FA）保護所有特權帳戶。這表明儘管有這些保護措施，還是發生了違規行為。

Some security experts speculated that the attacker might have socially engineered a team member into providing their Discord token, bypassing all protections. However, Gupta dismissed this theory, suggesting instead that the breach likely occurred through a compromised bot or integration within the channel.

一些安全專家推測，攻擊者可能透過社交工程讓團隊成員提供他們的 Discord 令牌，從而繞過所有保護。然而，古普塔駁斥了這個理論，並認為這次洩漏可能是透過受感染的機器人或管道內的整合發生的。

“At this moment, we don’t believe any of our mods were compromised this way. It seems more likely that a bot/integration we had was compromised. Still going through the logs,” Gupta stated.

「目前，我們不認為我們的任何模組會受到這種方式的損害。我們擁有的機器人/整合似乎更有可能受到損害。仍在檢查日誌，」古普塔說。

Meanwhile, the attack appeared to have caused some losses for members of the channel. One Polygon user identified as ValidatorK reported losing approximately 120,000 MATIC and 30 ETH due to the exploit. ValidatorK criticized the network for not announcing the breach through its official X account, accusing Polygon of poor communication during the incident.

同時，這次攻擊似乎對頻道的成員造成了一些損失。一位名為 ValidatorK 的 Polygon 用戶報告稱，由於該漏洞，損失了約 120,000 MATIC 和 30 ETH。 ValidatorK 批評該網絡沒有透過其官方 X 帳戶宣布此違規事件，並指責 Polygon 在事件期間溝通不良。

“This was my Ethereum pool until about 33 minutes ago. But it disappeared in an instant through the link provided through the announcement on Polygon’s official Discord,” the victim lamented.

「直到大約 33 分鐘前，這還是我的以太坊池。但它透過 Polygon 官方 Discord 上的公告提供的連結瞬間消失了，」受害者感嘆道。