Solana (SOL) 遭受大規模軟體供應鏈攻擊，導致 dApp 資金流失

第 1 層區塊鏈網路 Solana (SOL) 週二遭受了大規模軟體供應鏈攻擊，影響了該協議的用戶和開發人員。

Layer 1 blockchain network Solana (CRYPTO: SOL) suffered a software supply chain attack Tuesday, impacting the protocol’s users and developers.

第 1 層區塊鏈網路 Solana（加密貨幣：SOL）週二遭受軟體供應鏈攻擊，影響了該協議的用戶和開發人員。

What Happened: The attack involved the solana/web3.js JavaScript library, which is used by many decentralized applications (dApps) on the Solana blockchain.

發生了什麼：攻擊涉及 solana/web3.js JavaScript 庫，Solana 區塊鏈上的許多去中心化應用程式 (dApp) 使用該庫。

An account with access to publish the library was compromised, leading to the introduction of the malicious code, the Solana development team, Anza, reported.

Solana 開發團隊 Anza 報告稱，有權發布該程式庫的帳戶遭到洩露，導致惡意程式碼的引入。

The code captured private keys and transmitted them to a hardcoded address, leading to attackers draining funds from dApps that interacted with these private keys.

該程式碼捕獲私鑰並將其傳輸到硬編碼地址，導致攻擊者從與這些私鑰互動的 dApp 中竊取資金。

“This should not affect non-custodial wallets, as they do not expose the private key stored in the library during any transaction,” Anza said on X (NYSE:TWTR).

Anza 在 X（NYSE：TWTR）上表示：“這不會影響非託管錢包，因為它們在任何交易期間都不會暴露存儲在庫中的私鑰。”

“Only projects that directly handle private keys and were updated between 3:20 pm UTC and 8:25 pm UTC are affected.”

“只有直接處理私鑰並在世界標準時間下午 3:20 到晚上 8:25 之間更新的項目才會受到影響。”

Solana development team quickly caught and erased the unauthorized code, asking developers to update to version 1.95.8.

Solana 開發團隊迅速擷取並刪除了未經授權的程式碼，要求開發者更新至 1.95.8 版本。

Analyst “MartyParty” later confirmed that the money flow had stopped, indicating the issue was fixed.

分析師「MartyParty」後來證實資金流動已經停止，顯示問題已解決。

Impact: Six-Figure Loss, SOL Price DropsDeFiLlama’s pseudonymous developer, 0xngmi, highlighted that some investors reported six-figure losses.

影響：六位數的損失，SOL 價格下跌 DeFiLlama 的化名開發商 0xngmi 強調，一些投資者報告了六位數的損失。

On-chain data showed that as much as $160,000 was lost, predominantly in SOL tokens, along with $31,000 in other tokens.

鏈上數據顯示，損失高達 16 萬美元，主要是 SOL 代幣，其他代幣損失達 31,000 美元。

“Could’ve been way worse, but this was handled well,” 0xngmi said.

「情況可能會更糟，但處理得很好，」0xngmi 說。

SOL Price Action: At press time, SOL was down 1.3% in the past 24 hours and trading at $235.98.

SOL 價格走勢：截至發稿時，SOL 在過去 24 小時內下跌 1.3%，交易價格為 235.98 美元。

Solana crypto asset dropped as low as $223 and crashed to $217 on December 3, when the attack was reported.

Solana 加密資產跌至 223 美元，並在 12 月 3 日攻擊事件被通報後暴跌至 217 美元。

However, the altcoin had soared 289.58% since December 2023 and reached a market cap of $112 billion.

然而，自 2023 年 12 月以來，該山寨幣已飆升 289.58%，市值達到 1,120 億美元。

The information presented in this article is for informational and educational purposes only. The article does not constitute financial advice or advice of any kind. Coin Edition is not responsible for any losses incurred as a result of the utilization of content, products, or services mentioned. Readers are advised to exercise caution before taking any action related to the company.

本文提供的資訊僅供參考和教育目的。本文不構成任何形式的財務建議或建議。對於因使用上述內容、產品或服務而造成的任何損失，Coin Edition 不承擔任何責任。建議讀者在採取任何與該公司相關的行動之前務必謹慎行事。