Ronin Network 黑客攻击：白帽或黑帽黑客瞄准 NFT 游戏网络

在加密货币领域，恶意行为者和其他人之间的界限有时可能很模糊。这一点可以从 Ronin Network 的例子中看出，Ronin Network 是一个为 NFT 游戏 Axie Infinity 提供支持的区块链，该游戏最近遭遇了重大漏洞。

Blockchain technology has advanced rapidly in recent years, introducing new possibilities and challenges in the realm of finance and digital assets. As the crypto space continues to expand, so too does the need for vigilance against malicious actors attempting to exploit vulnerabilities.

近年来，区块链技术发展迅速，给金融和数字资产领域带来了新的可能性和挑战。随着加密空间的不断扩大，对试图利用漏洞的恶意行为者也需要保持警惕。

Recently, the Ronin Network, a blockchain powering the NFT game Axie Infinity, encountered a potential $12 million exploit, prompting the network to shut down its bridge operations. However, as the dust settles, a gray area emerges, leaving us to question the true nature of the hackers' actions.

最近，为 NFT 游戏 Axie Infinity 提供支持的区块链 Ronin Network 遇到了潜在的 1200 万美元的漏洞，促使该网络关闭了其桥接业务。然而，随着尘埃落定，灰色地带出现，让我们质疑黑客行为的真实性质。

In the early hours of Tuesday, August 6, the Ronin Network detected an exploit resulting in the loss of 3,996 ETH, valued at approximately $9.8 million. Blockchain security firm PeckShield was among the first to report the suspicious transaction on social media, which prompted Ronin to immediately halt its bridge operations. The network’s co-founder, Aleksander Larsen, later confirmed the shutdown.

8 月 6 日星期二凌晨，Ronin Network 检测到一个漏洞，导致 3,996 ETH 损失，价值约 980 万美元。区块链安全公司 PeckShield 是最早在社交媒体上报告可疑交易的公司之一，这促使 Ronin 立即停止其桥接业务。该网络的联合创始人亚历山大·拉森后来证实了该网络的关闭。

#PeckShieldAlert @Ronin_Network whitehacked? or Hacked? (w/ ~ $9.33M) pic.twitter.com/wfaY0zhVdI

#PeckShieldAlert @Ronin_Network 被白黑了？或被黑客入侵？ （含约 933 万美元）pic.twitter.com/wfaY0zhVdI

According to the Ronin Network team, the exploit was linked to a recent bridge upgrade that introduced an issue misinterpreting the required vote threshold for fund withdrawals. This vulnerability allowed the maximum allowable amount to be withdrawn in a single transaction, which the hackers proceeded to do. They withdrew approximately 4,000 Ether (ETH) and 2 million USDC, valued at about $12 million.

据 Ronin Network 团队称，该漏洞与最近的一次桥升级有关，该升级引入了一个错误解释资金提取所需投票阈值的问题。该漏洞允许在单笔交易中提取最大允许金额，黑客随后就这样做了。他们提取了约 4,000 个以太币 (ETH) 和 200 万个 USDC，价值约 1200 万美元。

Earlier today, we were notified by white-hats about a potential exploit on the Ronin bridge. After verifying the reports, the bridge was paused approximately 40 minutes after the first on-chain action was spotted.

今天早些时候，白帽子通知我们有关 Ronin 桥上的潜在漏洞。核实报告后，在发现第一个链上操作后约 40 分钟，桥暂停了。

The actors withdrew ~4K ETH and 2M USDC, valued at ~$12M, which…

参与者提取了约 4K ETH 和 200 万 USDC，价值约 1200 万美元，其中……

The team, however, reported that the attackers appear to be “white hat” hackers rather than malicious actors, and they are currently negotiating with them to return the funds. White hat hackers typically use hacking to uncover vulnerabilities and help improve network security. They then return the seized funds to the owners, often keeping a reward. In many cases, they receive immunity for their action.

不过，该团队报告称，攻击者似乎是“白帽”黑客，而不是恶意行为者，目前正在与他们谈判以归还资金。白帽黑客通常使用黑客行为来发现漏洞并帮助提高网络安全。然后，他们将扣押的资金返还给所有者，并通常保留奖励。在许多情况下，他们因其行为而获得豁免权。

The latest hack comes after Ronin suffered a $9.7 million hack in February. In that incident, attackers routed 3,248 ETH through a crypto mixer, Tornado Cash, which is used to obscure the origins of the funds. The use of mixers was a clear indication that whoever was behind the hack was a malicious actor.

最新的黑客攻击发生在 Ronin 二月份遭受了价值 970 万美元的黑客攻击之后。在那次事件中，攻击者通过加密货币混合器 Tornado Cash 转移了 3,248 ETH，该货币混合器用于掩盖资金来源。混合器的使用清楚地表明，黑客攻击的幕后黑手是恶意行为者。

So far in the latest hack, the attackers have not moved the funds to separate wallets or attempted to interact with exchanges or mixers. Still, without direct insight into their intent, it can be difficult to distinguish between white hat and black hat hackers. Ultimately, before the hackers return the funds, there is no way to definitively say what their intentions were.

到目前为止，在最新的黑客攻击中，攻击者尚未将资金转移到单独的钱包中，也没有尝试与交易所或混合器进行交互。尽管如此，如果不直接了解他们的意图，就很难区分白帽黑客和黑帽黑客。最终，在黑客归还资金之前，无法明确说明他们的意图是什么。

On the Flipside

另一方面

Why This Matters

为什么这很重要

The latest Ronin network hack highlights the persistent risk of vulnerabilities in the network. Moreover, the involvement of white hat hackers increases the chances of the protocol recovering the majority of the funds.

最新的 Ronin 网络黑客攻击凸显了网络中持续存在的漏洞风险。此外，白帽黑客的参与增加了协议收回大部分资金的机会。

Read more about the gray area in exploits in Rho Protocol: Was $7.6M Rho Protocol Exploit a Hack? Suspected Attacker Denies Wanting to Steal from Users

详细了解 Rho 协议漏洞利用中的灰色区域：价值 760 万美元的 Rho 协议漏洞是黑客攻击吗？疑似攻击者否认想要窃取用户信息

Read more about Binance Labs latest investments: Binance Labs Backs New Web3 Startups Despite Market Downturn

了解有关币安孵化器最新投资的更多信息：尽管市场低迷，币安孵化器仍支持新的 Web3 初创公司