Solana (SOL) 遭受大规模软件供应链攻击，导致 dApp 资金流失

第 1 层区块链网络 Solana (SOL) 周二遭受了大规模软件供应链攻击，影响了该协议的用户和开发人员。

Layer 1 blockchain network Solana (CRYPTO: SOL) suffered a software supply chain attack Tuesday, impacting the protocol’s users and developers.

第 1 层区块链网络 Solana（加密货币：SOL）周二遭受软件供应链攻击，影响了该协议的用户和开发人员。

What Happened: The attack involved the solana/web3.js JavaScript library, which is used by many decentralized applications (dApps) on the Solana blockchain.

发生了什么：攻击涉及 solana/web3.js JavaScript 库，Solana 区块链上的许多去中心化应用程序 (dApp) 使用该库。

An account with access to publish the library was compromised, leading to the introduction of the malicious code, the Solana development team, Anza, reported.

Solana 开发团队 Anza 报告称，有权发布该库的帐户遭到泄露，导致恶意代码的引入。

The code captured private keys and transmitted them to a hardcoded address, leading to attackers draining funds from dApps that interacted with these private keys.

该代码捕获私钥并将其传输到硬编码地址，导致攻击者从与这些私钥交互的 dApp 中窃取资金。

“This should not affect non-custodial wallets, as they do not expose the private key stored in the library during any transaction,” Anza said on X (NYSE:TWTR).

Anza 在 X（NYSE：TWTR）上表示：“这不会影响非托管钱包，因为它们在任何交易期间都不会暴露存储在库中的私钥。”

“Only projects that directly handle private keys and were updated between 3:20 pm UTC and 8:25 pm UTC are affected.”

“只有直接处理私钥并在世界标准时间下午 3:20 到晚上 8:25 之间更新的项目才会受到影响。”

Solana development team quickly caught and erased the unauthorized code, asking developers to update to version 1.95.8.

Solana 开发团队迅速捕获并删除了未经授权的代码，要求开发者更新到 1.95.8 版本。

Analyst “MartyParty” later confirmed that the money flow had stopped, indicating the issue was fixed.

分析师“MartyParty”后来证实资金流动已经停止，表明问题已得到解决。

Impact: Six-Figure Loss, SOL Price DropsDeFiLlama’s pseudonymous developer, 0xngmi, highlighted that some investors reported six-figure losses.

影响：六位数的损失，SOL 价格下跌 DeFiLlama 的化名开发商 0xngmi 强调，一些投资者报告了六位数的损失。

On-chain data showed that as much as $160,000 was lost, predominantly in SOL tokens, along with $31,000 in other tokens.

链上数据显示，损失高达 160,000 美元，主要是 SOL 代币，其他代币损失达 31,000 美元。

“Could’ve been way worse, but this was handled well,” 0xngmi said.

“情况可能会更糟，但处理得很好，”0xngmi 说。

SOL Price Action: At press time, SOL was down 1.3% in the past 24 hours and trading at $235.98.

SOL 价格走势：截至发稿时，SOL 在过去 24 小时内下跌 1.3%，交易价格为 235.98 美元。

Solana crypto asset dropped as low as $223 and crashed to $217 on December 3, when the attack was reported.

Solana 加密资产跌至 223 美元，并在 12 月 3 日攻击事件被报道后暴跌至 217 美元。

However, the altcoin had soared 289.58% since December 2023 and reached a market cap of $112 billion.

然而，自 2023 年 12 月以来，该山寨币已飙升 289.58%，市值达到 1120 亿美元。

The information presented in this article is for informational and educational purposes only. The article does not constitute financial advice or advice of any kind. Coin Edition is not responsible for any losses incurred as a result of the utilization of content, products, or services mentioned. Readers are advised to exercise caution before taking any action related to the company.

本文中提供的信息仅供参考和教育目的。本文不构成任何形式的财务建议或建议。对于因使用上述内容、产品或服务而造成的任何损失，Coin Edition 不承担任何责任。建议读者在采取任何与该公司相关的行动之前务必谨慎行事。