Sonne Finance 因價值 2000 萬美元的加密貨幣搶劫摧毀平台而停止運營

借貸協議 Sonne Finance 於 5 月 14 日遭遇駭客攻擊，導致價值約 2,000 萬美元的加密貨幣被盜。 Web3 安全公司 Cyvers 發現了涉及 Sonne Finance 的 USDC 和 WETH 合約的持續攻擊。儘管駭客立即暫停了操作，但在被發現之前已經竊取了大量資金。 Sonne 目前正在研究追回被盜資金的方案，包括與漏洞利用者簽訂可能的錯誤賞金協議。然而，攻擊者尚未對這些嘗試做出回應，並將部分戰利品轉移到新的錢包地址。

Sonne Finance Suspends Operations After Devastating Hack Drains $20 Million in Cryptocurrencies

Sonne Finance 在遭受毀滅性駭客攻擊導致 2000 萬美元加密貨幣流失後暫停運營

May 15, 2023

2023 年 5 月 15 日

In a severe blow to the decentralized finance (DeFi) ecosystem, lending protocol Sonne Finance has been forced to halt operations following a sophisticated cyberattack that siphoned approximately $20 million worth of cryptocurrencies from its platform.

借貸協議 Sonne Finance 因複雜的網路攻擊從其平台上竊取了價值約 2000 萬美元的加密貨幣，被迫停止運營，這對去中心化金融 (DeFi) 生態系統造成了嚴重打擊。

Initial Detection and Response

初步檢測和回應

On May 14th, at approximately 10:30 pm UTC, Web3 security firm Cyvers intercepted an ongoing attack targeting Sonne Finance's USD Coin (USDC) and Wrapped Ether (WETH) smart contracts. However, by the time Sonne Finance became aware of the situation roughly 25 minutes later, the perpetrator had already plundered significant amounts of cryptocurrency, including $20 million in WETH, VELO, soVELO, and Wrapped USDC.

5 月 14 日，世界標準時間晚上 10:30 左右，W​​eb3 安全公司 Cyvers 攔截了針對 Sonne Finance 的美元硬幣 (USDC) 和 Wrapped Ether (WETH) 智能合約的持續攻擊。然而，大約 25 分鐘後，當 Sonne Finance 意識到這一情況時，犯罪者已經掠奪了大量加密貨幣，其中包括價值 2000 萬美元的 WETH、VELO、soVELO 和 Wrapped USDC。

Prompt Action and Investigation

迅速採取行動和調查

Shortly after the breach was discovered, Sonne Finance swiftly took action by suspending all markets on Optimism and partnering with Cyvers to launch a comprehensive investigation. The protocol is actively exploring all avenues for recovering the stolen funds, including negotiations with the hacker for a potential bug bounty.

發現漏洞後不久，Sonne Finance 迅速採取行動，暫停 Optimism 上的所有市場，並與 Cyvers 合作進行全面調查。該協議正在積極探索追回被盜資金的所有途徑，包括與駭客就潛在的錯誤賞金進行談判。

Negotiations and Hacker's Response

談判和駭客的回應

Unfortunately, the hacker has thus far been unwilling to engage in negotiations. According to blockchain investigator PeckShield, the exploiter has already transferred a substantial portion of the stolen assets (approximately $7.8 million) to a fresh wallet address.

不幸的是，駭客迄今不願參與談判。據區塊鏈調查員 PeckShield 稱，攻擊者已經將大部分被盜資產（約 780 萬美元）轉移到新的錢包位址。

Evasive Tactics and Privacy Concerns

規避策略和隱私問題

The hacker's subsequent actions indicate an intent to launder the stolen funds through a privacy-enhancing protocol such as Tornado Cash. By leveraging such mechanisms, the perpetrator aims to hinder traceability and conceal the illicitly obtained cryptocurrencies.

駭客隨後的行為表明其意圖透過 Tornado Cash 等隱私增強協議來清洗被盜資金。透過利用此類機制，犯罪者旨在阻礙可追溯性並隱藏非法取得的加密貨幣。

Exploitation Root Cause Analysis

漏洞利用根本原因分析

Sonne Finance's internal investigation has revealed that the attack was executed through a donation attack on Sonne's Compound v2 forks, which had a previously identified security vulnerability. Community member PoorBabyCorn has attributed the incident to Sonne Finance's decision to employ Compound v2 despite being aware of the associated risks, raising concerns about potential security breaches.

Sonne Finance 的內部調查顯示，這次攻擊是透過對 Sonne 的 Compound v2 分叉進行捐贈攻擊來執行的，該分叉存在先前發現的安全漏洞。社群成員 PoorBabyCorn 將此事件歸因於 Sonne Finance 儘管意識到相關風險，但仍決定採用Compound v2，引發了對潛在安全漏洞的擔憂。

Parallel Hedge Fund Breach

平行對沖基金違規

In a separate incident, the main hedge fund operated by crypto institutional investment firm BlockTower Capital has reportedly fallen victim to an exploit, resulting in a partial depletion of its assets. The stolen funds remain unrecovered, and BlockTower has engaged blockchain forensic analysts to unravel the details of the breach and identify the perpetrators.

據報道，在另一起事件中，加密機構投資公司 BlockTower Capital 營運的主要對沖基金已成為漏洞的受害者，導致其部分資產耗盡。被盜資金仍未追回，BlockTower 已聘請區塊鏈取證分析師來查明違規細節並識別肇事者。

Ongoing Investigations and Security Implications

正在進行的調查和安全影響

Both Sonne Finance and BlockTower Capital continue to collaborate with law enforcement and security experts to investigate the respective attacks and apprehend the responsible parties. These incidents underscore the critical importance of robust security measures and continuous due diligence within the DeFi ecosystem to safeguard user funds and maintain trust in the industry.

Sonne Finance 和 BlockTower Capital 都繼續與執法和安全專家合作，調查各自的攻擊並逮捕責任方。這些事件凸顯了 DeFi 生態系統內強有力的安全措施和持續盡職調查對於保護用戶資金和維持產業信任的至關重要性。