Thorswap Hack and Bounty：一個扭曲的加密貨幣

Thorswap用錢包來抓住針對其創始人的錢包，引發賞金狩獵並在Defi空間中提出重要的安全問題。獲取最新消息！

THORSwap Hack and Bounty: A Crypto Whodunit with a Twist

Thorswap Hack and Bounty：一個扭曲的加密貨幣

The crypto world never sleeps, and neither do the hackers. Recently, THORSwap, a decentralized exchange (DEX) aggregator, found itself in the spotlight after an exploit. But it wasn't your typical protocol breach; instead, it targeted a personal wallet linked to none other than THORChain founder John-Paul Thorbjornsen. This incident has sparked a bounty offer and a serious conversation about crypto security. Here's the lowdown:

加密世界永遠不會睡覺，黑客也沒有。最近，分散的交易所（DEX）聚合器Thorswap在漏洞後發現了自己的聚光燈。但這不是您的典型協議違規；取而代之的是，它針對的是與Thorchain創始人John-Paul Thorbjornsen相關的個人錢包。這一事件引發了關於加密貨幣安全的賞金報價和認真的對話。這是低點：

The $1.2 Million Heist: What Happened?

耗資120萬美元的搶劫：發生了什麼？

According to reports, the exploit resulted in a loss estimated at around $1.2 million. Blockchain security firm PeckShield initially flagged the incident, causing some initial panic that THORChain itself might be compromised. Fortunately, the THORSwap team quickly clarified that the exploit was isolated to Thorbjornsen's personal wallet, not the THORChain protocol itself.

據報導，漏洞利用導致估計損失約為120萬美元。區塊鏈安全公司Peckshield最初標記了這一事件，引起了一些最初的恐慌，表明Thorchain本身可能會受到損害。幸運的是，Thorswap團隊很快澄清說，該漏洞被隔離在Thorbjornsen的個人錢包中，而不是Thorchain協議本身。

The Victim: THORChain's Founder

受害者：Thorchain的創始人

On-chain sleuth ZachXBT pointed fingers at North Korean hackers, suggesting they made off with approximately $1.35 million in a scam targeting Thorbjornsen. The attack allegedly started with a compromised Telegram account, luring Thorbjornsen into clicking a malicious link disguised as a Zoom meeting invite. This led to the compromise of an older MetaMask account synced with iCloud Keychain.

鏈上偵探Zachxbt將手指指向朝鮮黑客，這表明他們用針對Thorbjornsen的騙局以大約135萬美元的價格賺錢。據稱，這次襲擊是從折衷的電報帳戶開始的，吸引了索伯·霍恩森（Thorbjornsen）點擊偽裝成變焦會議邀請的惡意鏈接。這導致了與iCloud鑰匙扣同步的較舊的metamask帳戶的妥協。

The Bounty: Return the Loot, No Questions Asked (Well, Almost)

賞金：返回戰利品，沒有問題（幾乎）

In true crypto fashion, THORSwap responded with an on-chain bounty offer. The message to the hacker was simple: return the stolen $THOR tokens, and no legal action will be taken, provided it's done within 72 hours. This offer highlights the growing trend of using on-chain bounties as a means to recover stolen funds in the crypto space.

以真正的加密方式，Thorswap以鏈上的賞金報價做出了回應。給黑客的信息很簡單：返回被盜的托爾托爾令牌，只要在72小時內完成，就不會採取法律行動。此優惠強調了使用鏈上賞金作為收回加密貨幣空間中被盜資金的一種方法的日益增長的趨勢。

THORSwap's Response: "It Wasn't Us!"

Thorswap的回答：“不是我們！”

THORSwap CEO, known as "Paper X," emphasized that neither THORChain nor THORSwap's infrastructure was compromised. This clarification was crucial in reassuring users and investors that the core protocol remained secure. However, the incident did expose vulnerabilities in personal wallet security.

Thorswap首席執行官（稱為“ Paper X”）強調，Thorchain和Thorswap的基礎設施都沒有受到損害。這種澄清對於讓用戶和投資者保證核心協議仍然安全至關重要。但是，該事件確實暴露了個人錢包安全方面的漏洞。

Lessons Learned: Security, Security, Security

經驗教訓：安全，安全，安全

Thorbjornsen himself highlighted the risks of storing sensitive keys on cloud services like iCloud. He advocated for the use of multi-signature wallets as a more secure alternative. The attack underscores the sophistication of modern crypto scams, often involving social engineering and phishing tactics. As the industry matures, users must prioritize security best practices to protect their assets.

Thorbjornsen本人強調了將敏感鑰匙存儲在Icloud等雲服務上的風險。他主張使用多簽名錢包作為更安全的選擇。這次攻擊強調了現代加密騙局的複雜性，通常涉及社會工程和網絡釣魚策略。隨著行業的成熟，用戶必須優先考慮安全最佳實踐以保護其資產。

My Two Satoshis

我的兩個satoshis

While the bounty offer is a clever move, it also highlights the reactive nature of security in crypto. We need to shift towards proactive measures, including user education and robust security protocols at the individual wallet level. Multi-sig wallets, hardware wallets, and a healthy dose of skepticism are no longer optional; they're essential.

儘管賞金報價是一個巧妙的舉動，但它也突出了加密貨幣中安全性的反應性。我們需要轉向積極的措施，包括在單個錢包級別的用戶教育和強大的安全協議。多人錢包，硬件錢包和健康劑量的懷疑不再是可選的。這是必不可少的。

The Takeaway

外賣

The THORSwap incident serves as a stark reminder that even the most seasoned crypto veterans can fall victim to sophisticated attacks. It's a call to action for everyone in the space to double down on security and stay vigilant against evolving threats. In the meantime, let's hope the hacker has a change of heart and returns the funds. After all, who doesn't love a good redemption story? Plus, wouldn't it be a wild plot twist if they contacted THORSwap through Discord for the OTC deal? The crypto world – always delivering the drama!

Thorswap事件引起了一個明顯的提醒，即使是經驗豐富的加密貨幣退伍軍人也可能成為複雜攻擊的受害者。這是對空間中每個人的行動呼籲，要求對安全性進行加倍加倍，並保持警惕，以應對不斷發展的威脅。同時，我們希望黑客改變了主意並返回資金。畢竟，誰不喜歡一個好的救贖故事？另外，如果他們通過OTC交易與Thorswap聯繫，這不是一個狂野的情節轉折嗎？加密世界 - 始終發揮戲劇性！