WazirX 在遭受 2.3 億美元駭客攻擊後將客戶資金轉移至新的多重簽名錢包

印度加密貨幣交易所 WazirX 在 7 月遭受了 2.3 億美元的駭客攻擊，該交易所表示正在將客戶資金轉移到新的多重簽署錢包，並終止與加密貨幣託管提供商 Liminal 的關係。

Crypto exchange WazirX is moving its remaining customer funds to new multi signature wallets and ending its relationship with crypto custody provider Liminal, following a $230 million hack in July.

繼 7 月遭受 2.3 億美元的駭客攻擊後，加密貨幣交易所 WazirX 正在將剩餘的客戶資金轉移到新的多重簽章錢包，並終止與加密貨幣託管提供商 Liminal 的關係。

In an X post on Aug. 14, updating customers on the aftermath of the attack, the exchange said it was moving its remaining assets from Liminal to new multisig wallets to ensure their “maximum security.”

在 8 月 14 日的 X 貼文中，該交易所向客戶通報了攻擊後的最新情況，表示正在將剩餘資產從 Liminal 轉移到新的多重簽名錢包，以確保其「最大的安全性」。

This step is essential to ensure maximum security of the assets…

此步驟對於確保資產的最大安全性至關重要...

In a post-mortem report published soon after the attack, the Mumbai-based exchange explained that its multisig wallets needed a set of signatures from three members of its team and another from crypto custody service provider Liminal in order to verify a transaction.

在攻擊發生後不久發布的事後報告中，這家位於孟買的交易所解釋說，其多重簽名錢包需要來自其團隊三名成員的一組簽名和來自加密託管服務提供商Liminal 的一組簽名，才能驗證交易。

However, according to the exchange, attackers took advantage of a discrepancy between the data displayed on Liminal’s interface and what was actually contained in a transaction, allowing them to transfer control of the wallet to themselves.

然而，根據該交易所的說法，攻擊者利用 Liminal 介面上顯示的數據與交易中實際包含的數據之間的差異，使他們能夠將錢包的控制權轉移給自己。

The attackers then stole more than $230 million in various cryptocurrencies, including Ethereum (ETH), Shiba Inu (SHIB), Polygon (MATIC), and Pepe (PEPE). The lesser tokens were swapped into ETH, bringing the total haul to more than 59,000 ETH.

隨後，攻擊者竊取了超過 2.3 億美元的各種加密貨幣，包括以太坊 (ETH)、柴犬 (SHIB)、Polygon (MATIC) 和佩佩 (PEPE)。較少的代幣被兌換成 ETH，使總金額超過 59,000 ETH。

The attack limited the exchange’s ability to maintain a 1:1 collateral with its assets, forcing it to halt both crypto and fiat withdrawals.

此次攻擊限制了該交易所以其資產維持 1:1 抵押品的能力，迫使其停止加密貨幣和法幣提款。

Liminal has since stated that its infrastructure was not breached and that all wallets in its custody, including those of WazirX, were safe.

Liminal 此後表示，其基礎設施並未遭到破壞，其保管的所有錢包（包括 WazirX 的錢包）都是安全的。

However, in its latest update, WazirX maintained its stance that Liminal’s systems and interface had been compromised in the July 18 exploit, thus necessitating the precaution. It, however, gave no exact timeline as to when the wallet migration would be completed, only stating that it would publish a list of all the new addresses once it was done with the exercise.

然而，在最新的更新中，WazirX 堅持其立場，即 Liminal 的系統和介面已在 7 月 18 日的攻擊中受到損害，因此有必要採取預防措施。然而，它沒有給出錢包遷移何時完成的確切時間表，只是表示一旦完成，它將發布所有新地址的清單。

Following the exploit, WazirX had tried to institute a “socialized loss strategy,” which would have seen users access 55% of their funds with the remaining 45% held by the exchange in Tether (USDT) equivalent tokens.

漏洞發生後，WazirX 試圖制定“社會化損失策略”，該策略將使用戶獲得 55% 的資金，其餘 45% 由交易所以 Tether (USDT) 等價代幣持有。

However, the proposal was met with widespread outrage, with users accusing the exchange of trying to avoid taking full responsibility for the losses incurred from the hack. Subsequently, WazirX was forced to backtrack on the plan, asking for more time to work on a resolution.

然而，該提議遭到了廣泛的憤怒，用戶指責交易所試圖避免對駭客攻擊造成的損失承擔全部責任。隨後，WazirX 被迫取消該計劃，要求更多時間來製定解決方案。