马特·弗里（Matt Furie），黑客和朝鲜：Web3世界中的纠结网络

最近针对与青蛙创作者马特·弗里（Matt Furie）佩佩（Pepe）以及伊朗加密货币交易所Nobitex漏洞的项目有关的黑客攻击，揭示了复杂的方案和潜在的朝鲜参与。

Matt Furie, Hacking, and DPRK: A Tangled Web in the Web3 World

马特·弗里（Matt Furie），黑客和朝鲜：Web3世界中的纠结网络

The crypto world moves fast, and sometimes it takes unexpected turns. Recently, the intersection of meme culture, NFT projects, and alleged North Korean cyber activity has created a particularly bizarre and concerning narrative. Let’s dive in.

加密世界的移动很快，有时会出乎意料的转弯。最近，模因文化，NFT项目和所谓的朝鲜网络活动的交汇处引起了人们对叙述的特别奇怪和奇怪的。让我们潜水。

The Replicandy Debacle and the Matt Furie Connection

复制的崩溃和马特·弗里连接

Matt Furie, the artist behind the iconic Pepe the Frog meme, hasn't had the best luck lately with his NFT ventures. His 'Replicandy' collection, launched in June, suffered a major blow when a hacker exploited a vulnerability, minting thousands of new NFTs and tanking the floor price by a staggering 97%. Ouch.

标志性的佩佩（Pepe the Frog Meme）背后的艺术家马特·弗里（Matt Furie）最近对他的NFT冒险并没有祝您好运。他的“复制”系列于6月推出，当黑客剥削脆弱性，造成数千个新的NFT并使地板价格惊人的97％时，遭受了重大打击。哎哟。

But it gets weirder. Blockchain investigator ZachXBT uncovered a potential link between the Replicandy exploit and a broader hacking campaign, pointing fingers at... North Korea.

但这变得怪异。区块链调查员Zachxbt发现了复制品漏洞和更广泛的黑客运动之间的潜在联系，将手指指向...朝鲜。

DPRK IT Workers and the Web3 Infiltration

DPRK IT工人和Web3渗透

ZachXBT's investigation suggests that North Korean IT workers, likely hired unknowingly as developers, may be behind the attacks on Replicandy, as well as other projects like Favrr, Hedz and Zogz. The attacker gained control of the key contracts and initiated a second token issuance and dumped them into the liquidity pool, causing a sharp collapse in the floor price.

ZachXBT的调查表明，朝鲜IT工人可能在不知不觉中以开发人员的身份雇用，可能是对复制品的攻击以及其他项目，以及Favrr，Hedz和Zogz。攻击者获得了对关键合同的控制权，并开始了第二次令牌发行，并将其倾倒到流动性池中，从而导致地板价格急剧下降。

The Favrr project, a Web3 marketplace, experienced a similar exploit, with over $680,000 siphoned off. Funds were traced to addresses associated with potential payments to DPRK IT specialists. GitHub profiles with suspicious activity – Korean language settings, VPN usage, mismatched time zones – further fueled the suspicion.

Web3市场FAVRR项目经历了类似的利用，超过680,000美元。资金可追溯到与向朝鲜IT专家付款相关的地址。具有可疑活动的GitHub概况 - 韩国语言设置，VPN使用情况，不匹配的时区 - 进一步加剧了怀疑。

On-Chain Evidence and the Nobitex Hack

链上的证据和Nobitex Hack

The investigation revealed a network of addresses used to consolidate and route funds to centralized exchanges, with some flows indicating a persistent compensation system for the alleged ITW group. Also, Iranian cryptocurrency exchange Nobitex suffered a breach, with onchain data revealing that around $82 million was siphoned from its reserves. A hacker collective calling itself Predatory Sparrow has claimed responsibility for the coordinated hit on the centralized exchange (CEX).

调查显示，用于合并和路线资金到集中交易所的地址网络，其中一些流动表明对所谓的ITW集团有持续的补偿系统。此外，伊朗加密货币交易所遭受了违规，onChain数据表明，从其储备中偷走了约8200万美元。一个hacker的集体称为掠夺性麻雀，声称对集中式交易所（CEX）的协调命中率负责。

Why This Matters

为什么这很重要

This situation highlights the growing threat of sophisticated cyberattacks targeting the Web3 space. With more money flowing into crypto, it's becoming an increasingly attractive target for malicious actors, including nation-state-backed groups. The alleged involvement of North Korean hackers demonstrates a systemic approach to infiltrating projects by posing as developers. So, the web3 builders must be extremely vigilant when designing security architectures, and calls users to exercise maximum caution.

这种情况凸显了针对Web3空间的复杂网络攻击的日益增长的威胁。随着更多的钱流入加密货币，它已成为包括民族国家支持团体在内的恶意演员的越来越有吸引力的目标。所谓的朝鲜黑客参与表明，通过摆姿势作为开发商，一种系统的渗透项目方法。因此，在设计安全体系结构时，Web3构建器必须非常警惕，并呼吁用户最大程度地谨慎。

Final Thoughts

最后的想法

From Pepe memes to potential North Korean hacking rings, the crypto world is never short on surprises. It's a wild, wild west out there, folks. So buckle up, stay vigilant, and maybe double-check who you're hiring as a developer. You never know where they might actually be logging in from!

从佩佩模因到潜在的朝鲜黑客戒指，加密货币世界永远不会缺乏惊喜。伙计们，这是一个狂野的西部。因此，搭扣，保持警惕，也许是双重检查您作为开发人员雇用的人。您永远不知道它们实际上可能从哪里登录！