MakerDAO 治理代表因网络钓鱼攻击损失 1100 万美元

MakerDAO 治理代表遭遇复杂的网络钓鱼攻击，导致价值 1100 万美元的 Aave Ethereum Maker (aEthMKR) 和 Pendle USDe 代币被盗。

A MakerDAO governance delegate has fallen prey to a phishing attack, leading to the theft of $11 million in Aave Ethereum Maker (aEthMKR) and Pendle USDe tokens.

MakerDAO 治理代表遭遇网络钓鱼攻击，导致价值 1100 万美元的 Aave Ethereum Maker (aEthMKR) 和 Pendle USDe 代币被盗。

The compromised assets were swiftly transferred from the delegate's address, 0xfb94d3404c1d3d9d6f08f79e58041d5ea95accfa, to the scammer's address, 0x739772254924a57428272f429bd55f30eb36bb96, with the transaction confirmed in merely 11 seconds. This governance delegate played a crucial role in MakerDAO, a decentralized finance (DeFi) platform, impacting significant decision-making processes.

被盗资产迅速从受托人的地址 0xfb94d3404c1d3d9d6f08f79e58041d5ea95accfa 转移到诈骗者的地址 0x739772254924a57428272f429bd55f30eb36bb96，交易仅用了 11 秒就得到确认。这位治理代表在去中心化金融 (DeFi) 平台 MakerDAO 中发挥了至关重要的作用，影响了重大决策过程。

Within MakerDAO, governance delegates hold great responsibility, participating in voting on various proposals that influence the protocol's development and operations. They engage in polls and executive votes that ultimately decide the implementation of new measures into the Maker protocol. Typically, MakerDAO tokenholders and delegates advance proposals from initial polls to final executive votes, followed by a security waiting period known as the Governance Security Module (GSM) to ensure stability and prevent abrupt changes.

在 MakerDAO 中，治理代表承担着重大责任，参与对影响协议开发和运营的各种提案进行投票。他们参与民意调查和行政投票，最终决定在 Maker 协议中实施新措施。通常，MakerDAO 代币持有者和代表会提出从最初民意调查到最终执行投票的提案，然后是称为治理安全模块（GSM）的安全等待期，以确保稳定性并防止突然变化。

Rising Threat of Phishing Scams

网络钓鱼诈骗的威胁不断上升

In recent news, Cointelegraph reported on the increasing prevalence of approval phishing tactics employed by scammers. These scams aim to trick users into authorizing transactions that grant attackers access to their wallets, enabling them to pilfer funds. According to Chainalysis, such methods, often utilized by “pig-butchering” scammers, are on the rise.

在最近的新闻中，Cointelegraph 报道称，诈骗者采用的批准网络钓鱼策略越来越普遍。这些骗局旨在诱骗用户授权交易，从而使攻击者能够访问他们的钱包，从而窃取资金。据 Chainaanalysis 称，“杀猪”诈骗者经常使用的此类方法正在增加。

Phishing scams involve deceivers posing as trustworthy entities to extract sensitive information from victims. In this case, the governance delegate was deceived into signing multiple phishing signatures, which ultimately facilitated the asset theft.

网络钓鱼诈骗涉及欺骗者冒充可信实体从受害者那里提取敏感信息。在本例中，治理代表被欺骗签署了多个钓鱼签名，最终促成了资产被盗。

Earlier in 2024, Scam Sniffer reported that phishing scams resulted in the loss of $300 million from 320,000 users in 2023 alone. One of the most severe incidents documented involved a single victim losing $24.05 million due to various phishing techniques, including permit, permit 2, approve, and increase allowance.

2024 年初，Scam Sniffer 报告称，仅 2023 年，网络钓鱼诈骗就导致 32 万用户损失 3 亿美元。记录的最严重事件之一涉及一名受害者由于各种网络钓鱼技术（包括许可、许可 2、批准和增加津贴）而损失 2405 万美元。