两兄弟因复杂的价值 2500 万美元的以太坊漏洞被起诉

据称，Anton 和 James Peraire-Bueno 兄弟利用流行的以太坊软件中的漏洞执行了一项复杂的欺诈计划。美国检察官声称，他们针对有争议的 MEV 做法（最大可提取价值）来操纵区块链交易，并在一次攻击中净赚 2500 万美元，该攻击被描述为操纵既定规则并违反既定法律。

Unveiling a Sophisticated $25 Million Ethereum Exploit: Two Brothers Mastermind an Elaborate Scheme

揭开价值 2500 万美元的复杂以太坊漏洞利用：两兄弟精心策划的计划

In a daring heist that has sent shockwaves through the cryptocurrency industry, two brothers have been indicted for exploiting a vulnerability in a popular software used by trading bots on the Ethereum blockchain, netting an estimated $25 million in illicit gains in a matter of seconds.

在一场震惊整个加密货币行业的大胆抢劫中，两兄弟因利用以太坊区块链上交易机器人使用的流行软件中的漏洞而被起诉，在几秒钟内获得了估计 2500 万美元的非法收益。

According to an indictment unsealed by the United States Department of Justice, brothers Anton Peraire-Bueno, 24, and James Peraire-Bueno, 28, meticulously planned and executed a four-step exploit known as "The Bait," "Unblinding the block," "The Search," and "The Propagation." Their intricate scheme targeted the realm of maximal extractable value (MEV), a controversial practice that allows validators and builders to extract value from users by reordering or inserting transactions in a block before it is added to the blockchain.

根据美国司法部公布的一份起诉书，24 岁的安东·佩雷尔-布埃诺 (Anton Peraire-Bueno) 和 28 岁的詹姆斯·佩雷尔-布埃诺 (James Peraire-Bueno) 兄弟精心策划并执行了一项名为“诱饵”的四步攻击，“揭开区块的盲点， ““搜索”和“传播”。他们复杂的计划针对的是最大可提取价值（MEV）领域，这是一种有争议的做法，允许验证者和构建者在将交易添加到区块链之前通过在块中重新排序或插入交易来从用户那里提取价值。

MEV-Boost, a software program used by an overwhelming majority of Ethereum validators, serves as a mitigating strategy to ensure more equitable distribution of MEV. However, the Peraire-Bueno brothers exploited a vulnerability in this software, enabling them to access transactions in blocks before they were officially sent to validators. They targeted three MEV bots lacking specific checks and deployed 16 validators designed to lure these bots into their trap.

MEV-Boost 是绝大多数以太坊验证者使用的软件程序，可作为一种缓解策略，以确保更公平地分配 MEV。然而，Peraire-Bueno 兄弟利用了该软件中的一个漏洞，使他们能够在块中的交易正式发送给验证器之前访问它们。他们针对三个缺乏特定检查的 MEV 机器人，并部署了 16 个验证器，旨在引诱这些机器人落入陷阱。

The brothers' malicious validators seized the opportunity to exploit the bots' vulnerability by pulling apart bundled transactions, which typically execute automatically in fractions of seconds. By exploiting the absence of certain checks in the targeted bots, the brothers gained access to signed transactions, allowing them to manipulate these transactions and drain the bots of $25 million.

兄弟俩的恶意验证者抓住机会，通过拆散捆绑交易来利用机器人的漏洞，这些交易通常会在几分之一秒内自动执行。通过利用目标机器人中某些检查的缺失，兄弟俩获得了签名交易的访问权限，从而可以操纵这些交易并从机器人中榨取 2500 万美元。

The government's indictment strongly asserts that the brothers' actions breached established community norms and ventured into the realm of fraud. They are accused of sending "false signatures" to a crucial player in the blockchain known as a "relay" to prematurely release the full content of proposed blocks, including the private transaction information. As Blocknative CEO Matt Cutler aptly put it, "Stealing is stealing, regardless of the terms that enable that stealing."

政府的起诉书强烈主张兄弟俩的行为违反了既定的社区规范，并冒险进入欺诈领域。他们被指控向区块链中被称为“中继”的关键参与者发送“虚假签名”，以过早地发布拟议区块的全部内容，包括私人交易信息。正如 Blocknative 首席执行官马特·卡特勒 (Matt Cutler) 恰当地说的那样，“偷窃就是偷窃，无论使用什么条款来实现这种偷窃。”

The indictment details the brothers' extensive research and planning, as well as their subsequent attempts to conceal their activities. Internet searches for "top crypto lawyers," "wire fraud statute of limitations," and "fraudulent Ethereum addresses database" underscore their awareness of the seriousness of their actions. Additionally, James Peraire-Bueno's request for a safe deposit box large enough to fit a laptop raises further suspicion.

起诉书详细描述了兄弟俩的广泛研究和计划，以及他们随后试图隐瞒其活动的情况。互联网上搜索“顶级加密律师”、“电汇欺诈时效”和“欺诈性以太坊地址数据库”突显了他们对其行为严重性的认识。此外，詹姆斯·佩雷尔-布埃诺 (James Peraire-Bueno) 要求提供一个足够大以容纳笔记本电脑的保险箱，这引发了进一步的怀疑。

The Ethereum ecosystem has been marred by various controversial MEV trading practices, but many leading figures view this particular exploit as pure theft. Taylor Monahan, a lead product manager at MetaMask, emphasized that stealing and laundering millions of dollars should be met with severe consequences.

以太坊生态系统因各种有争议的 MEV 交易行为而受到损害，但许多领先人物认为这种特殊的利用纯粹是盗窃。 MetaMask 首席产品经理泰勒·莫纳汉 (Taylor Monahan) 强调，盗窃和洗钱数百万美元应该面临严重后果。

The indictment serves as a stark reminder of the growing sophistication of cryptocurrency-related crime and the need for vigilance in protecting digital assets. As the industry evolves, law enforcement agencies will undoubtedly face increasing challenges in combating these increasingly complex schemes.

该起诉书清楚地提醒人们，与加密货币相关的犯罪日益复杂，并且需要保持警惕保护数字资产。随着行业的发展，执法机构在打击这些日益复杂的计划时无疑将面临越来越多的挑战。