Unizen 利用黑客通过 Tornado Cash Mixer 洗钱超过 200 万美元

2024 年 3 月 Unizen 漏洞利用的黑客通过 Tornado Cash 混合器洗钱超过 200 万美元。网络安全公司 Peckshield

A hacker responsible for the March 2024 Unizen exploit has laundered over $2 million through the Tornado Cash mixer. Cyber security firm Peckshield Alerts reported that the attacker laundered 865.4 ETH, which is currently valued at around $2.16 million, from the exploit wallet.

一名对 2024 年 3 月 Unizen 漏洞负责的黑客已通过 Tornado Cash 混合器洗钱超过 200 万美元。网络安全公司 Peckshield Alerts 报告称，攻击者从漏洞钱包中洗掉了 865.4 ETH，目前价值约 216 万美元。

This activity occurred 151 days after the first attack, which resulted in a loss of $2.1 million due to an ‘approve issue’ on Unizen’s platform. All efforts to retrieve the stolen funds from the hacker have been unsuccessful, as the hacker has not responded to the team's attempts to contact them.

该活动发生在第一次攻击 151 天后，由于 Unizen 平台上的“批准问题”，导致损失 210 万美元。所有从黑客那里找回被盗资金的努力都没有成功，因为黑客没有回应团队的联系尝试。

The laundering process began with the transfer of 2,179,859 DAI from the exploit wallet to another unknown punk wallet, addressed as “0X866. . . 84d7.” The laundered DAI was then exchanged for ETH in Uniswap, and it continued its journey through Tornado Cash in 26 transactions. This cleared both the exploiter's pockets, while the gainers walked away with their pockets full.

洗钱过程首先将 2,179,859 DAI 从漏洞钱包转移到另一个未知的朋克钱包，地址为“0X866”。 。 。 84d7。”洗完的 DAI 随后在 Uniswap 中兑换成 ETH，并通过 Tornado Cash 继续进行 26 笔交易。这使得剥削者的口袋都清空了，而获利者则荷包满了。

The March 2024 Attack

2024 年 3 月的袭击

The attack occurred on March 9, 2024, when a vulnerability in Unizen’s platform, known as the “approve issue,” was exploited, leading to the theft of $2.1 million in USDT from the firm, which was then swapped to DAI. PeckShield discovered the vulnerability and notified Unizen, but by the time the alert was received, the damage had already been done.

这次攻击发生在 2024 年 3 月 9 日，当时 Unizen 平台中的一个漏洞（称为“批准问题”）被利用，导致该公司 210 万美元的 USDT 被盗，然后被兑换为 DAI。 PeckShield 发现了该漏洞并通知了 Unizen，但当收到警报时，损害已经造成。

Unizen attempted to contact the hacker, requesting the return of the stolen assets and offering to increase the bounty for returning the assets to 20%, but the hacker never responded. The team tried to reach out to the hacker through on-chain messages in an attempt to plead for the return of the stolen funds in exchange for a reward.

Unizen试图联系黑客，要求归还被盗资产，并提出将归还资产的赏金提高到20%，但黑客从未回应。该团队试图通过链上消息联系黑客，请求返还被盗资金以换取奖励。

The hack on the Unizen platform is reminiscent of the Nomad Bridge hack, highlighting the susceptibility of even large platforms to cyber attacks. The Nomad Bridge was attacked for around $200 million in August 2022 due to a similar oversight in vigilance, emphasizing the necessity for constant updation and enhancement of security measures. The hacker in this case was clever enough to buy the dip, purchasing thousands of ETH by swapping the stolen DAI.

Unizen 平台上的黑客攻击让人想起 Nomad Bridge 黑客攻击，凸显了即使是大型平台也容易受到网络攻击。由于类似的警惕疏忽，Nomad Bridge 于 2022 年 8 月遭受了约 2 亿美元的攻击，这强调了不断更新和增强安全措施的必要性。在这种情况下，黑客足够聪明，通过交换被盗的 DAI 购买了数千个 ETH。