Gnus.AI 漏洞 127 萬美元被盜：對區塊鏈網路的警告

5 月 5 日，人工智慧區塊鏈網路 Gnus.AI 遭遇代幣鑄造漏洞，導致 127 萬美元損失。攻擊者獲取了團隊的私鑰並鑄造了 1 億個假 GNUS 代幣，導致價格暴跌並將財富轉移給攻擊者。該團隊宣布計劃發布新的代幣版本，並存入 100 萬美元的補償金，並強調區塊鏈網路中持續存在的漏洞風險。

Gnus.AI Exploited for $1.27 Million: A Cautionary Tale for Blockchain Networks

Gnus.AI 被利用價值 127 萬美元：區塊鏈網路的警示故事

On May 5th, 2024, the Gnus.AI artificial intelligence network fell victim to a malicious exploit that resulted in the theft of approximately $1.27 million worth of tokens. The attack, which targeted the network's Genius (GNUS) token, highlights the persistent vulnerability of blockchain networks to sophisticated cybercriminals.

2024 年 5 月 5 日，Gnus.AI 人工智慧網路成為惡意攻擊的受害者，導致價值約 127 萬美元的代幣被盜。這次攻擊針對的是該網路的 Genius (GNUS) 代幣，突顯了區塊鏈網路對於老練的網路犯罪分子來說持續存在的脆弱性。

According to an investigation conducted by CertiK, a leading blockchain security firm, the attacker gained access to the private key of a team account associated with the 0x18 address. This enabled them to manipulate the token's data and exploit the Axelar bridge protocol to mint a staggering 100 million fake GNUS tokens on the Fantom network.

根據領先的區塊鏈安全公司 CertiK 進行的調查，攻擊者獲得了與 0x18 位址關聯的團隊帳戶的私鑰的存取權限。這使他們能夠操縱代幣數據並利用 Axelar 橋接協議在 Fantom 網路上鑄造數量驚人的 1 億個假 GNUS 代幣。

The attacker then transferred these counterfeit tokens to the Ethereum network and sold them on the open market, causing a dramatic price crash that transferred the wealth of legitimate token holders to the perpetrator. The attack underscores the devastating consequences of compromised private keys, which serve as the gatekeepers to blockchain accounts.

然後，攻擊者將這些假冒代幣轉移到以太坊網絡，並在公開市場上出售，導致價格急劇下跌，將合法代幣持有者的財富轉移給犯罪者。這次攻擊凸顯了私鑰受損的破壞性後果，私鑰則是區塊鏈帳戶的看門人。

In a bid to mitigate the damage, Gnus.AI CEO, "SuperGenius," announced that the team would release a new version of the GNUS token and advised users to refrain from purchasing the old version. As a further measure, the team pledged to allocate $1 million in compensation, including $500,000 from its own funds and $500,000 from locked fees, to help affected token holders recover their losses.

為了減輕損害，Gnus.AI 執行長「SuperGenius」宣布團隊將發布新版本的 GNUS 代幣，並建議用戶不要購買舊版本。作為進一步的措施，團隊承諾分配 100 萬美元的賠償，其中包括 50 萬美元的自有資金和 50 萬美元的鎖定費用，以幫助受影響的代幣持有者挽回損失。

However, the Gnus.AI exploit serves as a stark reminder of the ongoing challenges faced by blockchain networks in safeguarding against malicious actors. Despite ongoing efforts to enhance security protocols, attackers continue to find innovative ways to exploit vulnerabilities and drain funds from unsuspecting users.

然而，Gnus.AI 漏洞清楚地提醒人們區塊鏈網路在防範惡意行為者方面所面臨的持續挑戰。儘管不斷努力增強安全協議，但攻擊者仍在繼續尋找創新方法來利用漏洞並從毫無戒心的用戶身上榨取資金。

The blockchain industry has witnessed a surge in funding, with AI blockchain platforms alone attracting $5 billion in investments during the first quarter of 2024. This influx of capital is fueling rapid growth and innovation, but it also presents a tempting target for cybercriminals seeking to exploit unsuspecting investors.

區塊鏈產業的資金激增，光是人工智慧區塊鏈平台在2024 年第一季就吸引了50 億美元的投資。犯罪分子提供了誘人的目標毫無戒心的投資者。

The Gnus.AI exploit highlights the critical need for robust security measures and continuous vigilance in the blockchain ecosystem. While the decline in exploit-related losses reported by CertiK in April 2024 may indicate a positive trend, it is essential to remain cautious and adopt best practices to minimize the risk of future attacks.

Gnus.AI 漏洞凸顯了區塊鏈生態系統中對強大安全措施和持續警惕的迫切需求。雖然 CertiK 於 2024 年 4 月報告的與漏洞利用相關的損失下降可能表明了積極的趨勢，但必須保持謹慎並採取最佳實踐，以盡量減少未來攻擊的風險。

As the blockchain landscape continues to evolve, it is imperative that network developers, token issuers, and users alike prioritize security and take proactive steps to protect themselves from the relentless threats posed by malicious actors. By embracing cutting-edge technologies, conducting thorough security audits, and implementing sound risk management strategies, the blockchain community can work together to deter future exploits and ensure the integrity and stability of the digital asset ecosystem.

隨著區塊鏈格局的不斷發展，網路開發人員、代幣發行者和用戶都必須優先考慮安全性，並採取積極主動的措施來保護自己免受惡意行為者帶來的無情威脅。透過採用尖端技術、進行徹底的安全審計以及實施健全的風險管理策略，區塊鏈社群可以共同努力阻止未來的攻擊，並確保數位資產生態系統的完整性和穩定性。