Gnus.AI 漏洞 127 万美元被盗：对区块链网络的警告

5 月 5 日，人工智能区块链网络 Gnus.AI 遭遇代币铸造漏洞，导致 127 万美元损失。攻击者获取了团队的私钥并铸造了 1 亿个假 GNUS 代币，导致价格暴跌并将财富转移给攻击者。该团队宣布计划发布新的代币版本，并存入 100 万美元的补偿金，并强调区块链网络中持续存在的漏洞风险。

Gnus.AI Exploited for $1.27 Million: A Cautionary Tale for Blockchain Networks

Gnus.AI 被利用价值 127 万美元：区块链网络的警示故事

On May 5th, 2024, the Gnus.AI artificial intelligence network fell victim to a malicious exploit that resulted in the theft of approximately $1.27 million worth of tokens. The attack, which targeted the network's Genius (GNUS) token, highlights the persistent vulnerability of blockchain networks to sophisticated cybercriminals.

2024 年 5 月 5 日，Gnus.AI 人工智能网络成为恶意攻击的受害者，导致价值约 127 万美元的代币被盗。此次攻击针对的是该网络的 Genius (GNUS) 代币，突显了区块链网络对于老练的网络犯罪分子来说持续存在的脆弱性。

According to an investigation conducted by CertiK, a leading blockchain security firm, the attacker gained access to the private key of a team account associated with the 0x18 address. This enabled them to manipulate the token's data and exploit the Axelar bridge protocol to mint a staggering 100 million fake GNUS tokens on the Fantom network.

根据领先的区块链安全公司 CertiK 进行的调查，攻击者获得了与 0x18 地址关联的团队帐户的私钥的访问权限。这使他们能够操纵代币数据并利用 Axelar 桥接协议在 Fantom 网络上铸造数量惊人的 1 亿个假 GNUS 代币。

The attacker then transferred these counterfeit tokens to the Ethereum network and sold them on the open market, causing a dramatic price crash that transferred the wealth of legitimate token holders to the perpetrator. The attack underscores the devastating consequences of compromised private keys, which serve as the gatekeepers to blockchain accounts.

然后，攻击者将这些假冒代币转移到以太坊网络，并在公开市场上出售，导致价格急剧下跌，将合法代币持有者的财富转移给犯罪者。这次攻击凸显了私钥受损的破坏性后果，私钥是区块链账户的看门人。

In a bid to mitigate the damage, Gnus.AI CEO, "SuperGenius," announced that the team would release a new version of the GNUS token and advised users to refrain from purchasing the old version. As a further measure, the team pledged to allocate $1 million in compensation, including $500,000 from its own funds and $500,000 from locked fees, to help affected token holders recover their losses.

为了减轻损害，Gnus.AI 首席执行官“SuperGenius”宣布团队将发布新版本的 GNUS 代币，并建议用户不要购买旧版本。作为进一步的措施，该团队承诺分配 100 万美元的赔偿，其中包括 50 万美元的自有资金和 50 万美元的锁定费用，以帮助受影响的代币持有者挽回损失。

However, the Gnus.AI exploit serves as a stark reminder of the ongoing challenges faced by blockchain networks in safeguarding against malicious actors. Despite ongoing efforts to enhance security protocols, attackers continue to find innovative ways to exploit vulnerabilities and drain funds from unsuspecting users.

然而，Gnus.AI 漏洞清楚地提醒人们区块链网络在防范恶意行为者方面所面临的持续挑战。尽管不断努力增强安全协议，但攻击者仍在继续寻找创新方法来利用漏洞并从毫无戒心的用户那里榨取资金。

The blockchain industry has witnessed a surge in funding, with AI blockchain platforms alone attracting $5 billion in investments during the first quarter of 2024. This influx of capital is fueling rapid growth and innovation, but it also presents a tempting target for cybercriminals seeking to exploit unsuspecting investors.

区块链行业的资金激增，仅人工智能区块链平台在 2024 年第一季度就吸引了 50 亿美元的投资。这种资本的涌入正在推动快速增长和创新，但也为寻求利用的网络犯罪分子提供了诱人的目标毫无戒心的投资者。

The Gnus.AI exploit highlights the critical need for robust security measures and continuous vigilance in the blockchain ecosystem. While the decline in exploit-related losses reported by CertiK in April 2024 may indicate a positive trend, it is essential to remain cautious and adopt best practices to minimize the risk of future attacks.

Gnus.AI 漏洞凸显了区块链生态系统中对强大安全措施和持续警惕的迫切需求。虽然 CertiK 于 2024 年 4 月报告的与漏洞利用相关的损失下降可能表明了积极的趋势，但必须保持谨慎并采取最佳实践，以尽量减少未来攻击的风险。

As the blockchain landscape continues to evolve, it is imperative that network developers, token issuers, and users alike prioritize security and take proactive steps to protect themselves from the relentless threats posed by malicious actors. By embracing cutting-edge technologies, conducting thorough security audits, and implementing sound risk management strategies, the blockchain community can work together to deter future exploits and ensure the integrity and stability of the digital asset ecosystem.

随着区块链格局的不断发展，网络开发人员、代币发行者和用户都必须优先考虑安全性，并采取积极主动的措施来保护自己免受恶意行为者带来的无情威胁。通过采用尖端技术、进行彻底的安全审计以及实施健全的风险管理策略，区块链社区可以共同努力阻止未来的攻击，并确保数字资产生态系统的完整性和稳定性。