Unizen 利用駭客透過 Tornado Cash Mixer 洗錢超過 200 萬美元

2024 年 3 月 Unizen 漏洞利用的駭客透過 Tornado Cash 混合器洗錢超過 200 萬美元。網路安全公司 Peckshield

A hacker responsible for the March 2024 Unizen exploit has laundered over $2 million through the Tornado Cash mixer. Cyber security firm Peckshield Alerts reported that the attacker laundered 865.4 ETH, which is currently valued at around $2.16 million, from the exploit wallet.

一名對 2024 年 3 月 Unizen 漏洞負責的駭客已透過 Tornado Cash 混合器洗錢超過 200 萬美元。網路安全公司 Peckshield Alerts 報告稱，攻擊者從漏洞錢包中洗掉了 865.4 ETH，目前價值約 216 萬美元。

This activity occurred 151 days after the first attack, which resulted in a loss of $2.1 million due to an ‘approve issue’ on Unizen’s platform. All efforts to retrieve the stolen funds from the hacker have been unsuccessful, as the hacker has not responded to the team's attempts to contact them.

該活動發生在第一次攻擊 151 天后，由於 Unizen 平台上的“批准問題”，導致損失 210 萬美元。所有從駭客那裡找回被盜資金的努力都沒有成功，因為駭客沒有回應團隊的聯繫嘗試。

The laundering process began with the transfer of 2,179,859 DAI from the exploit wallet to another unknown punk wallet, addressed as “0X866. . . 84d7.” The laundered DAI was then exchanged for ETH in Uniswap, and it continued its journey through Tornado Cash in 26 transactions. This cleared both the exploiter's pockets, while the gainers walked away with their pockets full.

洗錢過程首先將 2,179,859 DAI 從漏洞錢包轉移到另一個未知的龐克錢包，地址為「0X866」。 。 。 84d7。洗完的 DAI 隨後在 Uniswap 中兌換成 ETH，並透過 Tornado Cash 繼續進行 26 筆交易。這使得剝削者的口袋都空了，而獲利者則荷包滿了。

The March 2024 Attack

2024 年 3 月的攻擊

The attack occurred on March 9, 2024, when a vulnerability in Unizen’s platform, known as the “approve issue,” was exploited, leading to the theft of $2.1 million in USDT from the firm, which was then swapped to DAI. PeckShield discovered the vulnerability and notified Unizen, but by the time the alert was received, the damage had already been done.

這次攻擊發生在 2024 年 3 月 9 日，當時 Unizen 平台中的一個漏洞（稱為「批准問題」）被利用，導致該公司 210 萬美元的 USDT 被盜，然後被兌換為 DAI。 PeckShield 發現了該漏洞並通知了 Unizen，但當收到警報時，損害已經造成。

Unizen attempted to contact the hacker, requesting the return of the stolen assets and offering to increase the bounty for returning the assets to 20%, but the hacker never responded. The team tried to reach out to the hacker through on-chain messages in an attempt to plead for the return of the stolen funds in exchange for a reward.

Unizen試圖聯繫駭客，要求歸還被盜資產，並提出將歸還資產的賞金提高到20%，但駭客從未回應。該團隊試圖透過鏈上訊息聯繫駭客，請求返還被盜資金以換取獎勵。

The hack on the Unizen platform is reminiscent of the Nomad Bridge hack, highlighting the susceptibility of even large platforms to cyber attacks. The Nomad Bridge was attacked for around $200 million in August 2022 due to a similar oversight in vigilance, emphasizing the necessity for constant updation and enhancement of security measures. The hacker in this case was clever enough to buy the dip, purchasing thousands of ETH by swapping the stolen DAI.

Unizen 平台上的駭客攻擊讓人想起 Nomad Bridge 駭客攻擊，凸顯了即使是大型平台也容易受到網路攻擊。由於類似的警惕疏忽，Nomad Bridge 於 2022 年 8 月遭受了約 2 億美元的攻擊，這強調了不斷更新和增強安全措施的必要性。在這種情況下，駭客足夠聰明，透過交換被盜的 DAI 購買了數千個 ETH。