dYdX Hack：交易所应对涉及其 v3 协议的安全漏洞

dYdX 是一家著名的去中心化交易所，正在努力解决涉及其 v3 协议的重大安全漏洞问题。 7 月 23 日，据报道，攻击者通过安装代币耗尽程序破坏了 dYdX v3 的官方网站，这可能会窃取用户的资金。

DeFi MarketsdYdX Layer 2 Web3 Markets

DeFi 市场dYdX Layer 2 Web3 市场

dYdX Grapples with Security Breach on v3 Protocol Affecting User Funds

dYdX 努力应对影响用户资金的 v3 协议安全漏洞

Prominent decentralized exchange dYdX is facing a critical security breach on its v3 protocol, putting users’ funds at risk.

著名的去中心化交易所 dYdX 的 v3 协议面临严重的安全漏洞，使用户的资金面临风险。

On July 23, it was reported that an attacker compromised the official website for dYdX v3, installing a token-draining program capable of siphoning off users’ funds.

7 月 23 日，据报道，攻击者入侵了 dYdX v3 的官方网站，安装了一个能够吸走用户资金的代币耗尽程序。

The compromised site displayed error messages akin to those used in previous phishing scams, attempting to deceive users into revealing their wallet information.

受感染的网站显示与之前网络钓鱼诈骗中使用的错误消息类似的错误消息，试图欺骗用户泄露他们的钱包信息。

According to initial reports, the attacker's primary goal was to drain users' funds through the installation of a malicious script on the exchange's website. This script intercepted users' attempts to withdraw funds and redirected them to the attacker's wallet address.

根据初步报告，攻击者的主要目标是通过在交易所网站上安装恶意脚本来耗尽用户的资金。该脚本拦截用户提取资金的尝试，并将其重定向到攻击者的钱包地址。

The exchange's team swiftly issued a warning on social media, advising users not to visit the affected site or click any links associated with it until further notice.

该交易所团队迅速在社交媒体上发出警告，建议用户不要访问受影响的网站或点击与其相关的任何链接，直至另行通知。

“Critical update: dydx . exchange is compromised, do not visit or click any links on the site,” the exchange tweeted.

“重要更新：dydx。交易所已受到威胁，请勿访问或点击该网站上的任何链接。”该交易所在推特上写道。

“An attacker installed a token-draining program on the site. The protocol smart contracts are not compromised.”

“攻击者在网站上安装了令牌耗尽程序。协议智能合约不会受到损害。”

Fortunately, the protocol's v4 version, which operates on the Cosmos blockchain, is not affected by this breach and remains fully operational.

幸运的是，在 Cosmos 区块链上运行的该协议的 v4 版本并未受到此次漏洞的影响，并且仍然完全正常运行。

The dYdX v3 interface, accessible through dydx.exchange, was the primary target of this attack. According to dYdX, the smart contracts underpinning the v3 protocol were not compromised.

可通过 dydx.exchange 访问的 dYdX v3 接口是此次攻击的主要目标。据 dYdX 称，支撑 v3 协议的智能合约并未受到损害。

The smart contracts on dYdX v3 are safe, and are not compromised.

dYdX v3 上的智能合约是安全的，不会受到损害。

Do not attempt to withdraw any funds or interact with the website dydx . exchange until further update.

请勿尝试提取任何资金或与 dydx 网站互动。交流直至进一步更新。

This breach comes at a turbulent time for dYdX, with the exchange reportedly in talks to sell its derivatives trading arm.

这次违规事件发生在 dYdX 正处于动荡时期，据报道该交易所正在就出售其衍生品交易部门进行谈判。

Wintermute Trading and Selini Capital have emerged as potential buyers for this arm.

Wintermute Trading 和 Selini Capital 已成为该部门的潜在买家。

Based in the U.K., Wintermute is known for its algorithmic trading in digital assets, while Selini focuses on managing alternative investments in digital assets.

Wintermute 总部位于英国，以其数字资产算法交易而闻名，而 Selini 则专注于管理数字资产的另类投资。

This move follows the recent departure of dYdX's founder, Antonio Juliano, who stepped down as CEO on May 13. The company is now led by Ivo Crnkovic-Rubsamen, the former chief strategy officer.

此前，dYdX 创始人 Antonio Juliano 最近已于 5 月 13 日辞去首席执行官一职。该公司现由前首席战略官 Ivo Crnkovic-Rubsamen 领导。

In other news, dYdX launched its v5 version in June, introducing new features like isolated margin and markets, and support for Raydium Markets.

其他消息中，dYdX 于 6 月推出了 v5 版本，引入了独立保证金和市场等新功能，以及对 Raydium 市场的支持。

These upgrades allow traders to assign collateral to specific trades, mitigating cross-trade collateral risk and providing dedicated insurance for each collateral pool.

这些升级允许交易者为特定交易分配抵押品，降低跨交易抵押品风险，并为每个抵押品池提供专门的保险。

The dYdX v3 breach highlights a worrying trend in the Web3 space, with DNS hijacking attacks becoming increasingly common.

dYdX v3 漏洞凸显了 Web3 领域令人担忧的趋势，DNS 劫持攻击变得越来越普遍。

Earlier this month, both Compound Finance and Celer Network experienced similar attacks, which redirected their websites to malicious domains designed to drain user tokens.

本月早些时候，Compound Finance 和 Celer Network 都经历了类似的攻击，这些攻击将其网站重定向到旨在耗尽用户代币的恶意域。

As dYdX continues to navigate this challenging period, the focus will be on resolving the breach swiftly and effectively. The exchange's native token has already taken a hit, reporting a 10% decrease at press time.

随着 dYdX 继续度过这一充满挑战的时期，重点将是迅速有效地解决违规问题。该交易所的原生代币已经受到打击，截至发稿时已下跌 10%。