Ronin Network 駭客攻擊：白帽或黑帽駭客瞄準 NFT 遊戲網絡

在加密貨幣領域，惡意行為者和其他人之間的界線有時可能很模糊。這一點可以從 Ronin Network 的例子中看出，Ronin Network 是一個為 NFT 遊戲 Axie Infinity 提供支援的區塊鏈，該遊戲最近遭遇了重大漏洞。

Blockchain technology has advanced rapidly in recent years, introducing new possibilities and challenges in the realm of finance and digital assets. As the crypto space continues to expand, so too does the need for vigilance against malicious actors attempting to exploit vulnerabilities.

近年來，區塊鏈技術發展迅速，為金融和數位資產領域帶來了新的可能性和挑戰。隨著加密空間的不斷擴大，對試圖利用漏洞的惡意行為者也需要保持警惕。

Recently, the Ronin Network, a blockchain powering the NFT game Axie Infinity, encountered a potential $12 million exploit, prompting the network to shut down its bridge operations. However, as the dust settles, a gray area emerges, leaving us to question the true nature of the hackers' actions.

最近，為 NFT 遊戲 Axie Infinity 提供支援的區塊鏈 Ronin Network 遇到了潛在的 1,200 萬美元的漏洞，促使該網路關閉了其橋接業務。然而，隨著塵埃落定，灰色地帶出現，讓我們質疑駭客行為的真實本質。

In the early hours of Tuesday, August 6, the Ronin Network detected an exploit resulting in the loss of 3,996 ETH, valued at approximately $9.8 million. Blockchain security firm PeckShield was among the first to report the suspicious transaction on social media, which prompted Ronin to immediately halt its bridge operations. The network’s co-founder, Aleksander Larsen, later confirmed the shutdown.

8 月 6 日星期二凌晨，Ronin Network 偵測到一個漏洞，導致 3,996 ETH 損失，價值約 980 萬美元。區塊鏈安全公司 PeckShield 是最早在社群媒體上報告可疑交易的公司之一，這促使 Ronin 立即停止其橋接業務。該網絡的聯合創始人亞歷山大·拉森後來證實了該網絡的關閉。

#PeckShieldAlert @Ronin_Network whitehacked? or Hacked? (w/ ~ $9.33M) pic.twitter.com/wfaY0zhVdI

#PeckShieldAlert @Ronin_Network 被白黑了？或被駭客入侵？ （含約 933 萬美元）pic.twitter.com/wfaY0zhVdI

According to the Ronin Network team, the exploit was linked to a recent bridge upgrade that introduced an issue misinterpreting the required vote threshold for fund withdrawals. This vulnerability allowed the maximum allowable amount to be withdrawn in a single transaction, which the hackers proceeded to do. They withdrew approximately 4,000 Ether (ETH) and 2 million USDC, valued at about $12 million.

據 Ronin Network 團隊稱，該漏洞與最近的一次橋升級有關，該升級引入了一個錯誤解釋資金提取所需投票閾值的問題。該漏洞允許在單筆交易中提取最大允許金額，駭客隨後就這樣做了。他們提取了約 4,000 個以太幣 (ETH) 和 200 萬個 USDC，價值約 1200 萬美元。

Earlier today, we were notified by white-hats about a potential exploit on the Ronin bridge. After verifying the reports, the bridge was paused approximately 40 minutes after the first on-chain action was spotted.

今天早些時候，白帽子通知我們有關 Ronin 橋上的潛在漏洞。核實報告後，在發現第一個鏈上操作後約 40 分鐘，橋暫停了。

The actors withdrew ~4K ETH and 2M USDC, valued at ~$12M, which…

參與者提取了約 4K ETH 和 200 萬 USDC，價值約 1200 萬美元，其中…

The team, however, reported that the attackers appear to be “white hat” hackers rather than malicious actors, and they are currently negotiating with them to return the funds. White hat hackers typically use hacking to uncover vulnerabilities and help improve network security. They then return the seized funds to the owners, often keeping a reward. In many cases, they receive immunity for their action.

不過，該團隊報告稱，攻擊者似乎是「白帽」駭客，而不是惡意行為者，目前正在與他們談判以歸還資金。白帽駭客通常使用駭客行為來發現漏洞並幫助提高網路安全。然後，他們將扣押的資金返還給所有者，並通常保留獎勵。在許多情況下，他們因其行為而獲得豁免權。

The latest hack comes after Ronin suffered a $9.7 million hack in February. In that incident, attackers routed 3,248 ETH through a crypto mixer, Tornado Cash, which is used to obscure the origins of the funds. The use of mixers was a clear indication that whoever was behind the hack was a malicious actor.

最新的駭客攻擊發生在 Ronin 二月遭受了價值 970 萬美元的駭客攻擊之後。在那次事件中，攻擊者透過加密貨幣混合器 Tornado Cash 轉移了 3,248 ETH，該貨幣混合器用於掩蓋資金來源。混合器的使用清楚地表明，駭客攻擊的幕後黑手是惡意行為者。

So far in the latest hack, the attackers have not moved the funds to separate wallets or attempted to interact with exchanges or mixers. Still, without direct insight into their intent, it can be difficult to distinguish between white hat and black hat hackers. Ultimately, before the hackers return the funds, there is no way to definitively say what their intentions were.

到目前為止，在最新的駭客攻擊中，攻擊者尚未將資金轉移到單獨的錢包中，也沒有嘗試與交易所或混合器互動。儘管如此，如果不直接了解他們的意圖，就很難區分白帽駭客和黑帽駭客。最終，在駭客歸還資金之前，無法明確說明他們的意圖是什麼。

On the Flipside

另一方面

Why This Matters

為什麼這很重要

The latest Ronin network hack highlights the persistent risk of vulnerabilities in the network. Moreover, the involvement of white hat hackers increases the chances of the protocol recovering the majority of the funds.

最新的 Ronin 網路駭客攻擊凸顯了網路中持續存在的漏洞風險。此外，白帽駭客的參與增加了協議收回大部分資金的機會。

Read more about the gray area in exploits in Rho Protocol: Was $7.6M Rho Protocol Exploit a Hack? Suspected Attacker Denies Wanting to Steal from Users

詳細了解 Rho 協定漏洞利用中的灰色區域：價值 760 萬美元的 Rho 協定漏洞是駭客攻擊嗎？疑似攻擊者否認想要竊取用戶訊息

Read more about Binance Labs latest investments: Binance Labs Backs New Web3 Startups Despite Market Downturn

了解有關幣安孵化器最新投資的更多資訊：儘管市場低迷，幣安孵化器仍支持新的 Web3 新創公司