耗资2300万美元的Bitrue Exchange违规背后的黑客已经浮出水面

耗资2300万美元的Bitrue Exchange违规行为背后的黑客已经浮出水面，在低落近一年后移动和洗涤了大部分被盗的加密货币。

The hacker behind the $23 million Bitrue exchange breach has started moving and laundering a portion of the stolen crypto after nearly a year.

近一年后，耗资2300万美元的Bitrue Exchange违规行为背后的黑客已经开始移动和洗钱。

According to blockchain analytics firm Onchain Lens, the attacker recently sold $2.88 million worth of Shiba Inu (SHIB) and Holo (HOT) tokens to acquire 1,511 ETH at an average price of $1,911 per ETH.

根据区块链分析公司Onchain Lens的数据，攻击者最近以平均每ETH的平均价格出售了价值288万美元的Shiba INU（Shib）和Holo（Hot）代币，以平均价格为1,911美元。

15 hours ago, the @BitrueOfficial hacker sold $2.88M worth of $HOT and $SHIB to buy 1,511 $ETH at a price of $1,911.The hacker also sent 1,050 $ETH ($1.89M) through #TornadoCash and still holds 16.34M $DAI and 5,111.45 $ETH in another wallet.Address:… pic.twitter.com/YBSvMoVWN0

15小时前，@BitrueOfficial Hacker以1,911美元的价格售出了价值288万美元的$ HOT和$ SHIB以购买1,511美元的ETH。黑客还通过#TornAdocash发送了1,050美元的ETH（189亿美元），并通过#TornAdocash，仍然持有1634万美元的dai和5,111.45 $ Eth extress。 pic.twitter.com/ybsvmovwn0

Following the conversion, the hacker laundered 1,050 ETH—approximately $1.89 million—through Tornado Cash, a decentralized crypto mixer known for obfuscating fund flows. Despite the transactions, the attacker still controls roughly 5,111 ETH and 16.34 million DAI stablecoins, split across two wallets: 0xe2b5…3ed5 and 0x5026…ca97.

转换后，黑客洗了1,050 ETH（大约189万美元），这是龙卷风现金，这是一种以混淆基金流量而闻名的分散的加密货币混音器。尽管进行了交易，但攻击者仍然控制着大约5111个ETH和1,634万Dai Stablecoins，分裂了两个钱包：0xE2B5…3ED5和0x5026…CA97。

See Also: Bybit’s Ben Zhou Provides Update on $1.4 Billion Hacked ETH/BTC Whereabouts

另请参阅：Bybit's Ben Zhou提供了14亿美元黑客ETH/BTC下落的更新

Hot Wallet Vulnerabilities Reignite Security Concerns

热钱包脆弱性重新点燃安全问题

The hacker’s renewed activity has sparked concerns around security practices at centralized exchanges, particularly the risks posed by hot wallets.

黑客的重新活动引发了人们对集中交流的安全惯例的担忧，尤其是热钱包带来的风险。

Hot wallets offer rapid access for trading but remain more exposed to breaches compared to cold storage solutions, which are typically offline and thus harder to penetrate.

热钱包提供了快速的交易访问权限，但与冷藏解决方案相比，这些问题通常更容易受到破坏，而冷藏解决方案通常是离线的，因此更难穿透。

Related: Hacker Mints, Steals $5M ZK Using Admin Key for Old ZKsync Airdrop

相关：黑客造币厂，使用admin键窃取500万美元的ZK

Bitrue’s 2024 Hack: A Recap

Bitrue的2024 Hack：回顾

Singapore-based trading platform Bitrue disclosed the breach in April, revealing that an attacker had drained an estimated $23 million from one of its hot wallets. The stolen assets included Ethereum (ETH), Polygon (MATIC), Shiba Inu (SHIB), Quant (QNT), Gala (GALA), and Holo (HOT).

总部位于新加坡的交易平台比特鲁（Bitrue）在4月份透露了这一违规行为，表明攻击者估计从其中一个热钱包中耗尽了约2300万美元。被盗的资产包括以太坊（ETH），多边形（Matic），shiba inu（shib），Quant（qnt），Gala（Gala）和Holo（Hot）。

At the time, Bitrue assured customers that the compromised wallet accounted for less than 5% of total funds and that affected users would be fully reimbursed. However, the breach tarnished Bitrue’s reputation, especially considering the platform had already suffered a $5 million hack in 2019.

当时，Bitrue向客户保证，受损的钱包占资金总资金的不到5％，受影响的用户将得到充分偿还。但是，违规行为破坏了比特鲁的声誉，尤其是考虑到该平台在2019年已经遭受了500万美元的黑客攻击。

1/4: We have identified a brief exploit in one of our hot wallets on 07:18 (UTC), 14 April 2023. We were able to address this matter quickly and prevented the further exploit of funds. We take this matter seriously and are currently investigating the situation. pic.twitter.com/QioPHSB2DM

1/4：我们已经在2023年4月14日（UTC）的一个热钱包中确定了一个简短的利用。我们能够迅速解决此问题，并阻止了进一步的资金利用。我们认真对待此事，目前正在调查情况。 pic.twitter.com/qiophsb2dm

In March, the attacker sold 4,207 ETH for approximately 1,634.5 DAI each, at an average selling price of around $3,885 per ETH—considerably higher than current market conditions.

3月，攻击者以大约1,634.5 dai的价格出售了4,207 ETH，平均售价约为3,885美元，大约高于当前市场状况。

Today’s sale of the remaining SHIB and HOT to acquire additional ETH seems to be part of a slow but methodical laundering strategy.

今天出售剩余的湿骨和热门以获取额外的ETH似乎是一种缓慢而有条不紊的洗钱策略的一部分。

KiloEX Breach Highlights Growing DEX Security Risks

Kiloex违规突出了增长的DEX安全风险

Meanwhile, decentralized exchanges (DEXs) are facing their own vulnerabilities. Just days ago, KiloEX, a decentralized exchange operating on the BNB Chain and opBNB, fell victim to a $7 million exploit due to a flaw in its oracle system.

同时，分散的交流（DEX）正面临着自己的脆弱性。就在几天前，在BNB连锁店和OpbnB上运营的一个分散的交易所Kiloex因其甲骨文系统中的缺陷而成为700万美元的受害者。

The hacker manipulated KiloEX’s price feed, buying undervalued tokens and selling them at inflated prices before draining the platform’s liquidity.

这位黑客操纵了Kiloex的价格供稿，购买被低估的代币并以夸张的价格出售，然后再消耗平台的流动性。

🚨 Security Incident Announcement: KiloEx Vault ExploitDear KiloEx Community,We regret to inform you that the KiloEx Vault has been exploited. The attacker’s wallet address is: 0x00fac92881556a90fdb19eae9f23640b95b4bcbdWe urge all partner protocols and platforms to...

🚨安全事件公告：Kiloex Vault Exploitdear Kiloex社区，我们很遗憾地通知您，Kiloex保险库已被利用。攻击者的钱包地址是：0x00FAC92881556A90FDB19EE9F23640B95B4BCBDWE敦促所有合作伙伴协议和平台为...

As hackers become increasingly sophisticated in exploiting technical flaws and laundering funds, industry players face the critical challenge of fortifying their defenses and rebuilding user trust.

随着黑客在利用技术缺陷和洗钱资金方面变得越来越复杂，行业参与者面临着加强防御和重建用户信任的关键挑战。

The information presented in this article is for informational and educational purposes only. The article does not constitute financial advice or advice of any kind. Coin Edition is not responsible for any losses incurred as a result of the utilization of content, products, or services mentioned. Readers are advised to exercise caution before taking any action related to the company.

本文提供的信息仅用于信息和教育目的。本文不构成任何形式的财务建议或建议。由于提到的内容，产品或服务的利用，Coin Edition对任何损失概不负责。建议读者在采取与公司相关的任何行动之前谨慎行事。