Whale 因網路釣魚攻擊損失了 5500 萬美元的 DAI 穩定幣

8 月 20 日，一名加密貨幣用戶因遭受網路釣魚攻擊而損失數千萬美元。他們向駭客轉移了價值 5500 萬美元的穩定幣

A crypto user lost tens of millions on August 20 after falling victim to a phishing attack. The user transferred $55 million worth of stablecoins into the hacker’s wallet after approving a malicious transaction that aimed to drain their holdings.

8 月 20 日，一名加密貨幣用戶遭受網路釣魚攻擊，損失數千萬美元。用戶在批准旨在耗盡其持有資產的惡意交易後，將價值 5,500 萬美元的穩定幣轉入駭客的錢包。

The transaction occurred when the user confirmed an unknown transaction request on the Maker protocol, a DeFi stablecoin lending dapp (decentralized application). Upon signing the transaction, the user lost the millions they held in the DAI stablecoin. They attempted to send the assets associated with this malicious transaction to another wallet. However, the first transaction routing the assets to the bad actor’s wallet went through, leaving them with massive losses and a very expensive lesson.

當用戶在 Maker 協議（一個 DeFi 穩定幣借貸 dapp（去中心化應用程式））上確認未知交易請求時，交易發生。簽署交易後，用戶損失了他們在 DAI 穩定幣中持有的數百萬美元。他們試圖將與此惡意交易相關的資產發送到另一個錢包。然而，第一筆將資產轉移到壞人錢包的交易成功了，這給他們帶來了巨大的損失和非常昂貴的教訓。

That lesson is to never confirm any transaction request that comes from an unknown source. Users must check each transaction and ensure what they entail before signing them. Blockchain analytics firm Lookonchain echoed the same sentiments as it posted on X, “When you sign a transaction, always double-check before clicking “confirm” and do not sign unknown transactions.”

這個教訓是永遠不要確認任何來自未知來源的交易請求。用戶在簽署之前必須檢查每筆交易並確保其內容。區塊鏈分析公司 Lookonchain 也表達了與 X 上發布的觀點相同的觀點，“當您簽署交易時，請務必在單擊“確認”之前仔細檢查，並且不要簽署未知交易。”

It also reported on the hack, stating, “The whale carelessly signed an unknown transaction 13 hours ago, setting the owner of his 55.47M $DAI in Maker to the phishing address “0x0000db5c…41e70000.” The hacker acted swiftly after their exploit to “set the owner to a newly created address “0x5D4b” and withdrew the 54.47M $DAI.” They then exchanged “27.5M $DAI for 10,625 $ETH.” Bad actors often convert their ill-gotten proceeds to ETH to use in crypto mixers and cover their tracks.

它還報告了此次駭客攻擊，指出「鯨魚在 13 小時前不小心簽署了一筆未知交易，將 Maker 中 5547 萬美元 DAI 的所有者設置為釣魚地址「0x0000db5c…41e70000」。駭客在利用該漏洞後迅速採取行動，“將所有者設置為新創建的地址“0x5D4b”，並撤回了 5447 萬美元的 DAI。”然後他們將「2750 萬美元 DAI 換成 10,625 美元 ETH」。不良行為者經常將他們的不義之財轉換為 ETH，用於加密貨幣混合器並掩蓋他們的痕跡。

Phishing Attacks Are on the RisePhishing attacks are rising in the crypto space as hackers try to pull a fast one over unsuspecting users. They can occur in multiple ways, including malicious transaction requests. Otherwise, bad actors convince users to download malware capable of stealing private key information or manipulating transactions to route funds to destinations that users did not add as recipient addresses. A CertiK report from July revealed the first half of 2024 witnessed $498 million exploited through phishing attacks.

網路釣魚攻擊不斷增加隨著駭客試圖對毫無戒心的用戶發動快速攻擊，加密貨幣領域的網路釣魚攻擊不斷增加。它們可以透過多種方式發生，包括惡意交易請求。否則，不良行為者會誘騙用戶下載能夠竊取私鑰資訊或操縱交易的惡意軟體，以將資金路由至用戶未新增為收件者地址的目的地。 CertiK 7 月的報告顯示，2024 年上半年，網路釣魚攻擊造成的損失達 4.98 億美元。