Indodax 遭受 2200 万美元的加密货币黑客攻击

在几种加密货币损失近 2200 万美元后，印度尼西亚加密货币交易所 Indodax 停止了其网络和移动应用程序以调查此次黑客攻击。

Indonesia's largest crypto exchange, Indodax, has gone offline after a $22 million hack, prompting an urgent investigation into the breach that hit hot wallets on multiple blockchain networks.

印度尼西亚最大的加密货币交易所 Indodax 在遭受价值 2200 万美元的黑客攻击后已下线，促使对多个区块链网络上的热钱包遭受的漏洞进行紧急调查。

Indodax Hit by $22M Crypto Hack

Indodax 遭受 2200 万美元加密货币黑客攻击

Indonesian crypto exchange Indodax has halted its web and mobile applications to look into the hack after losing nearly $22 million in various cryptocurrencies.

印度尼西亚加密货币交易所 Indodax 在损失了近 2200 万美元的各种加密货币后，已停止其网络和移动应用程序以调查此次黑客攻击。

Multiple blockchain research firms, including PeckShield, SlowMist, and Cyvers, had raised the alarm on September 11 about a possible attack on Indodax’s hot wallets. The attacker managed to drain substantial amounts of tokens including Bitcoin, Tron, Ether, and Polygon, Cointelegraph reported.

包括 PeckShield、SlowMist 和 Cyvers 在内的多家区块链研究公司于 9 月 11 日就 Indodax 热钱包可能遭受的攻击发出警报。据 Cointelegraph 报道，攻击者成功窃取了大量代币，包括比特币、Tron、以太币和 Polygon。

According to SlowMist’s analysis, the attacker was able to exploit a vulnerability in Indodax’s withdrawal system, gaining access to the exchange's hot wallet and moving the funds. However, Cyvers suggested that the signature machine and other systems were compromised.

根据慢雾的分析，攻击者能够利用 Indodax 提现系统中的漏洞，访问该交易所的热钱包并转移资金。然而，Cyvers 表示签名机和其他系统受到了损害。

The hacker drained the Optimism blockchain of over $1.42 million in Bitcoin, Tron tokens worth $2.4 million, ERC-20 tokens valued at over $14.6 million, POL tokens worth $2.58 million, and ETH tokens valued at $0.9 million.

黑客从 Optimism 区块链上窃取了超过 142 万美元的比特币、价值 240 万美元的 Tron 代币、价值超过 1460 万美元的 ERC-20 代币、价值 258 万美元的 POL 代币和价值 90 万美元的 ETH 代币。

Hacker Converted Stolen Tokens to Ether

黑客将被盗的代币转换为以太币

Cyvers’ analysis noted that the attacker proceeded to convert the tokens to Ether after detecting over 150 suspicious transactions on multiple networks. Hackers typically use crypto mixing services like Tornado Cash to launder the funds after converting them to ETH.

Cyvers 的分析指出，攻击者在多个网络上检测到超过 150 笔可疑交易后，开始将代币转换为以太币。黑客通常使用 Tornado Cash 等加密货币混合服务将资金转换为 ETH 后进行洗钱。

Shortly after the hack warnings, Indodax acknowledged the attack and notified users about the temporary suspension of services.

黑客警告发出后不久，Indodax 承认了此次攻击，并通知用户暂时停止服务。

“Currently, we are conducting a complete maintenance to ensure the entire system is operating properly. During this maintenance process, the INDODAX web platform and application are temporarily inaccessible,” the company stated.

“目前，我们正在进行全面维护，以确保整个系统正常运行。在此维护过程中，INDODAX 网络平台和应用程序暂时无法访问。”该公司表示。

However, the crypto exchange assured investors that their crypto holdings were safe.

然而，加密货币交易所向投资者保证他们持有的加密货币是安全的。

Lazarus Group Suspected in Indodax Hack

Lazarus 集团涉嫌参与 Indodax 黑客攻击

Cyvers’ Head of AI, Yosi Hammer, has suspicions that the infamous Lazarus Group, a collective linked to North Korea, might be involved.

Cyvers 的人工智能主管 Yosi Hammer 怀疑臭名昭著的 Lazarus Group（一个与朝鲜有联系的组织）可能参与其中。

“The pattern and the characteristics of the (Indodax) attack highly resemble those of North Korea’s Lazarus Group,” he told BSCN.

“（Indodax）攻击的模式和特征与朝鲜 Lazarus 组织的攻击非常相似，”他告诉 BSCN。

According to data from CoinMarketCap, Indodax has $369 million in reserves, which could be used to compensate investors for their losses.

根据 CoinMarketCap 的数据，Indodax 拥有 3.69 亿美元的储备金，可用于补偿投资者的损失。