Polygon Labs 安全主管表示，造成价值 2.35 亿美元的 WazirX 加密货币交易所泄露事件的黑客至少在八天前就开始在链上进行准备。
Hackers preparing for the $235M WazirX theft 8 days prior: reportThe hackers behind the $235 million WazirX crypto exchange breach began preparing onchain at least eight days prior, according to Polygon Labs’s security chief.WazirX, one of India’s largest cryptocurrency exchanges, lost hundreds of millions to a multisig wallet hack on Thursday, July 18, which is being blamed on North Korean hacking organization Lazarus Group. Mudit Gupta, the Chief Information Security Officer of Polygon Labs, suggests the hackers had started “practicing” the hack onchain more than a week prior to executing the attack. It started with hackers upgrading the multisig to a malicious version that would later allow them to drain it, Gupta explained in a July 18 post on X. Tarun Mangukiya, the co-founder of payment platform Copperx, believes the hackers may have tricked WazirX into upgrading its Safe Implementation Skeleton. “Why did they upgrade it instead of just draining?” Gupta asked rhetorically. “Draining takes time and multiple transaction. They likely didn’t have access to all the required private keys and were dependent on signature phishing which they can’t do multiple times without getting caught.” In a follow-up post on X, WazirX has described the attack as a “force majeure event beyond our control.” “We have already blocked a few deposits and reached out to concerned wallets for recovery,” it added. The exchange announced a temporary withdrawal freeze soon after the hack. India's crypto sector holds breath for tax relief in upcoming budgetElsewhere in India, the cryptocurrency industry is eagerly hoping for relief from the country’s stringent crypto tax regulations, with India Finance Minister Nirmala Sitharaman set to present the Union Budget for the next fiscal year on July 23. Since 2022, India has slapped one of the world’s most severe tax regimes on cryptocurrency, with a flat 30% capital gains tax on profits from digital assets, including non-fungible tokens (NFTs). In addition, a 1% tax deducted at source (TDS) is levied on crypto transactions. India's crypto sector has been advocating a reduction in the TDS rate to 0.01% in the forthcoming budget. Sumit Gupta, CEO of CoinDCX, an exchange involved in pre-budget consultations, says this adjustment is seen as crucial to recapturing business that has shifted to offshore exchanges due to current heavy taxation. “We have also requested for a reduction in TDS rate… from 1% to 0.01%,” Gupta said in a statement shared with Magazine. We have also requested for a reduction in capital gains tax rate from 30% to the actual [income bracket] of the assessee.” Since the introduction of these tax measures in Sitharaman's 2022 Budget speech, Indian crypto exchanges have seen a drastic decline, with trading volumes plummeting by 97% and active users decreasing by 81%, according to a recent report by The National Academy of Legal Studies and Research (NASLAR). NASLAR's research found that the national treasury is losing approximately $700 million (59 billion Indian rupees) in tax revenue due to diminished activity on India’s leading exchanges. The study suggests that reducing the TDS rate to 0.01% could potentially double the nation’s tax revenue in the upcoming fiscal year. So far, India has had a hot and cold relationship with cryptocurrency while maintaining a positive outlook toward the potential of blockchain technology. The industry's growth hit a wall in 2018 when the Reserve Bank of India, the central bank, prohibited financial institutions from servicing crypto businesses — a ban that was overturned by the Supreme Court in 2020. More arrests in Hong Kong over fake cash for USDT scamHong Kong authorities have arrested three more suspects for allegedly selling counterfeit banknotes in exchange for stablecoin Tether (USDT). Local media reported on July 15 that a 44-year-old businessman was deceived into transferring $399,000 (3.11 million Hong Kong dollars) in USDT. The businessman then received three bundles of 1,000 Hong Kong dollar notes, with the counterfeit notes sandwiched by genuine bills. Suspects met with the victim in a hotel in the major shopping district of Tsim Sha Tsui before being taking him to finalize the deal at Mong Kok district, which is about a 10-minute drive away. Police have detained three suspects, a woman and two men, on suspicion of obtaining property by deception and possession of counterfeit banknotes. If convicted, they could face sentences ranging from 10 to 14 years in prison. This case bears a striking resemblance to an incident in April 2024 when a victim was
黑客在 8 天前为价值 2.35 亿美元的 WazirX 盗窃案做准备：据 Polygon Labs 安全主管称，价值 2.35 亿美元的 WazirX 加密货币交易所泄露事件背后的黑客至少在八天前就开始在链上做准备。 印度最大的加密货币交易所之一的 WazirX 损失了数百美元7 月 18 日星期四，多重签名钱包遭到黑客攻击，损失数百万美元，该事件被归咎于朝鲜黑客组织 Lazarus Group。 Polygon Labs 首席信息安全官 Mudit Gupta 表示，黑客在执行攻击前一周多就开始在链上“练习”黑客攻击。 Gupta 在 7 月 18 日在 X 上发表的一篇文章中解释道，首先是黑客将多重签名升级为恶意版本，随后他们将其耗尽。支付平台 Copperx 的联合创始人塔伦·曼古基亚 (Tarun Mangukiya) 认为，黑客可能已经诱骗 WazirX 进入升级其安全实施框架。 “他们为什么要升级而不是直接排水？”古普塔反问道。 “排水需要时间和多次交易。他们可能无法访问所有必需的私钥，并且依赖于签名网络钓鱼，他们无法多次进行签名网络钓鱼而不被抓住。”在 X 的后续帖子中，WazirX 将这次攻击描述为“我们无法控制的不可抗力事件”。它补充说：“我们已经冻结了一些存款，并联系相关钱包进行追回。”黑客攻击后不久，该交易所宣布暂时冻结提款。印度加密货币行业为即将到来的预算中的税收减免屏息以待在印度其他地方，加密货币行业迫切希望能够摆脱该国严格的加密货币税收法规，印度财政部长 Nirmala Sitharaman 将于 7 月 23 日提交下一财年的联邦预算自 2022 年以来，印度对加密货币实行了世界上最严厉的税收制度之一，对数字资产（包括不可替代代币（NFT））的利润征收 30% 的固定资本利得税。此外，对加密货币交易征收 1% 的源头扣除税 (TDS)。印度加密货币行业一直主张在即将到来的预算中将 TDS 率降低至 0.01%。参与预算前咨询的交易所 CoinDCX 首席执行官 Sumit Gupta 表示，这一调整对于重新夺回因当前高税收而转向离岸交易所的业务至关重要。古普塔在与杂志分享的一份声明中表示：“我们还要求将 TDS 率从 1% 降低到 0.01%。”我们还要求将资本利得税率从 30% 降低到评估者的实际 [收入等级]。”根据美国国家法律研究学院最近的一份报告，自西塔拉曼在 2022 年预算演讲中引入这些税收措施以来，印度加密货币交易所出现了大幅下滑，交易量骤降 97%，活跃用户减少 81%。研究（NASLAR）。 NASLAR 的研究发现，由于印度主要交易所的活动减少，国库正在损失约 7 亿美元（590 亿印度卢比）的税收。研究表明，将 TDS 率降低至 0.01% 可能会使下一财年的国家税收收入增加一倍。到目前为止，印度与加密货币的关系忽冷忽热，同时对区块链技术的潜力保持着积极的展望。 2018 年，印度储备银行禁止金融机构为加密货币业务提供服务，该行业的增长遇到了障碍，该禁令于 2020 年被最高法院推翻。香港因 USDT 骗局而逮捕更多人香港当局又逮捕了三名涉嫌出售假钞以换取稳定币 Tether (USDT) 的嫌疑人。当地媒体 7 月 15 日报道称，一名 44 岁商人被骗以 USDT 转账 399,000 美元（311 万港元）。随后，该商人收到了三捆1000港元的钞票，其中夹着假钞和真钞。嫌疑人在尖沙咀主要购物区的一家酒店与受害人会面，然后带他前往旺角区敲定交易，旺角区距离酒店约10分钟车程。警方已拘留三名嫌疑人，一名女子和两名男子，罪名是涉嫌通过欺骗手段获取财产和持有假钞。如果罪名成立，他们可能面临 10 至 14 年监禁。这起案件与 2024 年 4 月发生的一起事件极为相似，当时一名受害者
