加密货币 Whale 因网络钓鱼攻击损失了 5540 万美元的 Dai 稳定币

周二发生的这一事件在加密货币社区引起了震动，凸显了即使是最经验丰富的投资者也面临着在线诈骗的持续危险。

A cryptocurrency whale has lost a staggering $55.4 million worth of Dai stablecoin in a sophisticated phishing attack. The incident, which unfolded on Tuesday, has sent shockwaves through the crypto community, highlighting the persistent dangers of online scams even among the most seasoned investors.

加密货币鲸鱼在一次复杂的网络钓鱼攻击中损失了价值 5540 万美元的 Dai 稳定币。周二发生的这一事件在加密货币社区引起了震动，凸显了即使是最经验丰富的投资者也面临着在线诈骗的持续危险。

The first to raise the alarm was on-chain investigator ZachXBT, who uncovered the details of the attack. The attacker, exploiting a vulnerability in the whale’s externally owned account (EOA), managed to drain a Maker Vault—a key element in decentralized finance (DeFi) that allows users to borrow Dai stablecoins by depositing collateral.

第一个发出警报的是链上调查员 ZachXBT，他揭露了此次攻击的细节。攻击者利用鲸鱼外部拥有账户 (EOA) 中的漏洞，成功耗尽了 Maker Vault，这是去中心化金融 (DeFi) 的关键要素，允许用户通过存入抵押品借入 Dai 稳定币。

How the Attack Unfolded

攻击是如何展开的

According to CertiK, a leading blockchain security firm, the attacker used a phishing tool known as Inferno Drainer to carry out the heist. Inferno Drainer is notorious for creating fake websites and sending fraudulent emails that mimic legitimate cryptocurrency exchanges or DeFi platforms. By tricking the victim into believing they were interacting with a trusted source, the attacker was able to gain access to sensitive private information.

据领先的区块链安全公司 CertiK 称，攻击者使用名为 Inferno Drainer 的网络钓鱼工具来实施抢劫。 Inferno Drainer 因创建虚假网站和发送模仿合法加密货币交易所或 DeFi 平台的欺诈电子邮件而臭名昭著。通过欺骗受害者相信他们正在与可信来源进行交互，攻击者能够访问敏感的私人信息。

Once the attacker had control of the whale’s EOA, they swiftly transferred ownership of the user’s DSProxy—a smart contract that facilitates multiple contract calls in one transaction—to a new address under their control. This transfer of ownership was critical as it allowed the attacker to manipulate the Maker Vault.

一旦攻击者控制了鲸鱼的 EOA，他们就会迅速将用户 DSProxy（一种智能合约，可在一次交易中促进多个合约调用）的所有权转移到他们控制下的新地址。这种所有权转移至关重要，因为它允许攻击者操纵 Maker Vault。

With the DSProxy under their control, the attacker changed the owner address of the Maker Vault to their wallet and minted a massive 55,473,618 Dai stablecoins. These funds were then transferred out of the vault, effectively leaving the victim’s account empty.

在 DSProxy 的控制下，攻击者将 Maker Vault 的所有者地址更改为他们的钱包，并铸造了大量 55,473,618 Dai 稳定币。然后这些资金被转出金库，实际上使受害者的账户空了。

The Fallout

后果

Security firm Blocksec further analyzed the attack, confirming that the sequence of events. They noted that the victim was lured into signing a transaction that unknowingly changed the ownership of the DSProxy. After gaining full control, the attacker executed another transaction to drain the vault completely.

安全公司 Blocksec 进一步分析了这次攻击，确认了事件的顺序。他们指出，受害者被引诱签署了一笔交易，在不知不觉中改变了 DSProxy 的所有权。获得完全控制权后，攻击者执行了另一笔交易以完全耗尽金库。

Blocksec analyst Jingyi Guo explained that the victim likely signed the phishing transaction without realizing the consequences, as the victim’s attempts to regain control of the DSProxy were unsuccessful. Guo pointed out that the attack was less likely due to a compromised private key, but rather the result of the victim being tricked into signing a malicious transaction.

Blocksec分析师郭静仪解释说，受害者很可能在没有意识到后果的情况下签署了钓鱼交易，因为受害者试图重新获得对DSProxy的控制权但没有成功。郭指出，此次攻击不太可能是由于私钥泄露造成的，而是受害者被诱骗签署恶意交易的结果。

After successfully stealing the funds, the attacker transferred the stolen Dai to another address labeled 0x5D4b2, which is now handling the withdrawals and likely involved in further money laundering activities. The use of multiple addresses and the complexity of the attack make it difficult to trace the funds, posing a significant challenge to recovery efforts.

成功窃取资金后，攻击者将被盗的 Dai 转移到另一个标记为 0x5D4b2 的地址，该地址目前正在处理提款，并可能参与进一步的洗钱活动。多个地址的使用和攻击的复杂性使得追踪资金变得困难，给恢复工作带来了重大挑战。

The Broader Implications

更广泛的影响

This attack is a stark reminder of the risks that continue to plague the DeFi space. Just last month, the DEX aggregation and bridging protocol LI.FI suffered a security breach resulting in losses of $10 million. According to a report by Immunefi, the cryptocurrency industry has already seen over $1.19 billion in losses due to hacks and scams this year alone.

这次攻击清楚地提醒人们，继续困扰 DeFi 领域的风险。就在上个月，DEX 聚合和桥接协议 LI.FI 遭遇安全漏洞，造成 1000 万美元损失。根据 Immunefi 的一份报告，仅今年一年，加密货币行业就因黑客和诈骗造成了超过 11.9 亿美元的损失。

The fact that even experienced crypto investors can fall victim to such attacks explains the importance of heightened security measures and constant vigilance in the rapidly evolving world of digital finance.

即使是经验丰富的加密货币投资者也可能成为此类攻击的受害者，这一事实说明了在快速发展的数字金融世界中加强安全措施和保持警惕的重要性。

This incident highlights the ongoing threats in the crypto space and serves as a critical wake-up call. Investors, whether whales or everyday users, must prioritize security and remain cautious when interacting with online platforms. The sophistication of these attacks means that no one is immune, and the stakes have never been higher.

这一事件凸显了加密货币领域持续存在的威胁，并敲响了重要的警钟。投资者，无论是鲸鱼还是日常用户，在与在线平台互动时都必须优先考虑安全并保持谨慎。这些攻击的复杂性意味着没有人能够幸免，而且风险也从未如此之高。

As the investigation into this massive theft continues, it serves as a chilling warning to all crypto users to stay alert and protect their assets. For more on this developing story and other breaking news, stay connected to DeyThere, where we bring you the latest updates in real-time.

随着对这起大规模盗窃案的调查仍在继续，它对所有加密货币用户发出了令人不寒而栗的警告，要求他们保持警惕并保护自己的资产。有关这一发展故事和其他突发新闻的更多信息，请保持与 DeyThere 的联系，我们在这里为您实时提供最新更新。