Sonne Finance 遭受 2000 萬美元駭客攻擊，SONNE 代幣崩潰

在去中心化借貸協議遭受價值 2000 萬美元的駭客攻擊後，Sonne Finance 的 SONNE 代幣暴跌 60% 至 0.025 美元，駭客利用「捐贈」攻擊​​操縱市場。該漏洞與該平台的 Optimism 區塊鏈隔離，允許攻擊者在被破壞之前竊取各種代幣。開發商聲稱已追回 650 萬美元，並正在積極追捕駭客。

Sonne Finance Reels from $20 Million Hack, SONNE Token Plummets

Sonne Finance 遭受 2000 萬美元駭客攻擊，SONNE 代幣暴跌

Sonne Finance's SONNE token has taken a nosedive following a sophisticated hack that siphoned $20 million from the decentralized lending protocol in the early hours of Wednesday. Amidst the market turmoil, developers have revealed the extent of the breach and are actively pursuing avenues to recover the stolen funds.

Sonne Finance 的 SONNE 代幣在周三凌晨遭受複雜的駭客攻擊後，從去中心化借貸協議中竊取了 2000 萬美元。在市場動盪的情況下，開發商已經透露了違規的嚴重程度，並正在積極尋求追回被盜資金的途徑。

The SONNE token has witnessed a sharp depreciation, shedding over 60% of its value to a mere 2.5 cents, marking its lowest point in more than a year. Despite developers' swift intervention to halt the outflow of $6.5 million, the hack has eroded the protocol's market capitalization to a mere $20 million.

SONNE 代幣大幅貶值，價值下跌 60% 以上，跌至僅 2.5 美分，創下一年多來的最低點。儘管開發者迅速介入阻止了 650 萬美元的外流，但這次駭客攻擊已將該協議的市值侵蝕至僅 2,000 萬美元。

The perpetrators employed a "donation" attack, exploiting vulnerabilities in specific markets offered by the platform, allowing them to pilfer various tokens before their illicit activities were detected. The incident transpired on Sonne's platform hosted on the Optimism blockchain, while the protocol's Base blockchain version remained unscathed.

犯罪者採用「捐贈」攻擊​​，利用平台提供的特定市場的漏洞，使他們能夠在非法活動被發現之前竊取各種代幣。該事件發生在 Optimism 區塊鏈上託管的 Sonne 平台上，而該協議的 Base 區塊鏈版本卻毫髮無傷。

Unraveling the Hack's Mechanics

揭開駭客的機制

The exploit unfolded following the protocol's introduction of token markets for Velodrome Finance's VELO, based on a recent community proposal. The attacker cunningly exploited a two-day timelock to execute a series of four transactions, which involved creating markets and modifying collateral factors.

該漏洞是在該協議根據最近的社區提案為 Velodrome Finance 的 VELO 引入代幣市場後展開的。攻擊者狡猾地利用兩天的時間鎖來執行一系列四筆交易，其中涉及創建市場和修改抵押品因素。

A timelock contract functions as an automated mechanism that triggers a transaction's execution at a predetermined time, in this case, two days after its initiation. The attacker leveraged this feature to execute transactions involving substantial cryptocurrency donations, manipulating the exchange rates between two tokens.

時間鎖合約作為一種自動化機制，在預定時間觸發交易執行，在本例中是在交易啟動後兩天。攻擊者利用此功能執行涉及大量加密貨幣捐贈的交易，操縱兩個代幣之間的匯率。

By artfully orchestrating these transactions, the attacker duped the platform into perceiving it possessed more collateral than was genuinely available. Blockchain records indicate the attacker succeeded in transferring millions of VELO, ether, and USD Coin USDCUSD in the wake of the manipulation. Subsequently, they converted these assets into approximately $8 million worth of bitcoin and ether and rerouted the funds to a newly created wallet address in the early hours of the European trading day.

透過巧妙地安排這些交易，攻擊者欺騙平台，讓其認為自己擁有比真正可用的更多的抵押品。區塊鏈記錄顯示，攻擊者在操縱後成功轉移了數百萬個 VELO、以太幣和美元代幣 USDCUSD。隨後，他們將這些資產轉換為價值約 800 萬美元的比特幣和以太幣，並在歐洲交易日凌晨將資金重新轉移到新創建的錢包地址。

Sonne Finance had previously safeguarded itself against similar attacks by creating markets with zero collateral factors, manually adding and permanently removing collateral before malicious actors could exploit market fluctuations.

Sonne Finance 先前曾透過創建零抵押品因素的市場、在惡意行為者利用市場波動之前手動添加和永久刪除抵押品來保護自己免受類似攻擊。

Recovery Efforts Underway

恢復工作正在進行中

In an official statement regarding the exploit, Sonne Finance's developers have expressed their unwavering commitment to retrieving the stolen funds. They have also initiated a bounty program to incentivize the hacker's cooperation in returning the ill-gotten gains.

在一份關於該漏洞的官方聲明中，Sonne Finance 的開發人員表達了他們對追回被盜資金的堅定承諾。他們還啟動了一項賞金計劃，以激勵駭客合作返還非法所得。

The incident has underscored the heightened security risks associated with decentralized finance (DeFi) protocols and the urgent need for robust safeguards to protect users' funds. As the DeFi ecosystem continues to evolve, it is paramount that developers prioritize security measures and implement stringent protocols to prevent future hacks.

該事件凸顯了與去中心化金融（DeFi）協議相關的更高的安全風險，以及迫切需要採取強有力的保障措施來保護用戶的資金。隨著 DeFi 生態系統的不斷發展，開發人員優先考慮安全措施並實施嚴格的協議以防止未來的駭客攻擊至關重要。