WazirX 在遭受 2.3 亿美元黑客攻击后将客户资金转移至新的多重签名钱包

印度加密货币交易所 WazirX 在 7 月份遭受了 2.3 亿美元的黑客攻击，该交易所表示正在将客户资金转移到新的多重签名钱包，并终止与加密货币托管提供商 Liminal 的关系。

Crypto exchange WazirX is moving its remaining customer funds to new multi signature wallets and ending its relationship with crypto custody provider Liminal, following a $230 million hack in July.

继 7 月份遭受 2.3 亿美元的黑客攻击后，加密货币交易所 WazirX 正在将剩余的客户资金转移到新的多重签名钱包，并终止与加密货币托管提供商 Liminal 的关系。

In an X post on Aug. 14, updating customers on the aftermath of the attack, the exchange said it was moving its remaining assets from Liminal to new multisig wallets to ensure their “maximum security.”

在 8 月 14 日的 X 帖子中，该交易所向客户通报了攻击后的最新情况，表示正在将剩余资产从 Liminal 转移到新的多重签名钱包，以确保其“最大的安全性”。

This step is essential to ensure maximum security of the assets…

此步骤对于确保资产的最大安全性至关重要......

In a post-mortem report published soon after the attack, the Mumbai-based exchange explained that its multisig wallets needed a set of signatures from three members of its team and another from crypto custody service provider Liminal in order to verify a transaction.

在攻击发生后不久发布的事后报告中，这家位于孟买的交易所解释说，其多重签名钱包需要来自其团队三名成员的一组签名和来自加密托管服务提供商 Liminal 的一组签名，才能验证交易。

However, according to the exchange, attackers took advantage of a discrepancy between the data displayed on Liminal’s interface and what was actually contained in a transaction, allowing them to transfer control of the wallet to themselves.

然而，根据该交易所的说法，攻击者利用 Liminal 界面上显示的数据与交易中实际包含的数据之间的差异，使他们能够将钱包的控制权转移给自己。

The attackers then stole more than $230 million in various cryptocurrencies, including Ethereum (ETH), Shiba Inu (SHIB), Polygon (MATIC), and Pepe (PEPE). The lesser tokens were swapped into ETH, bringing the total haul to more than 59,000 ETH.

随后，攻击者窃取了超过 2.3 亿美元的各种加密货币，包括以太坊 (ETH)、柴犬 (SHIB)、Polygon (MATIC) 和佩佩 (PEPE)。较少的代币被兑换成 ETH，使总金额超过 59,000 ETH。

The attack limited the exchange’s ability to maintain a 1:1 collateral with its assets, forcing it to halt both crypto and fiat withdrawals.

此次攻击限制了该交易所以其资产维持 1:1 抵押品的能力，迫使其停止加密货币和法币提款。

Liminal has since stated that its infrastructure was not breached and that all wallets in its custody, including those of WazirX, were safe.

Liminal 此后表示，其基础设施并未遭到破坏，其保管的所有钱包（包括 WazirX 的钱包）都是安全的。

However, in its latest update, WazirX maintained its stance that Liminal’s systems and interface had been compromised in the July 18 exploit, thus necessitating the precaution. It, however, gave no exact timeline as to when the wallet migration would be completed, only stating that it would publish a list of all the new addresses once it was done with the exercise.

然而，在最新的更新中，WazirX 坚持其立场，即 Liminal 的系统和界面已在 7 月 18 日的攻击中受到损害，因此有必要采取预防措施。然而，它没有给出钱包迁移何时完成的确切时间表，只是表示一旦完成，它将发布所有新地址的列表。

Following the exploit, WazirX had tried to institute a “socialized loss strategy,” which would have seen users access 55% of their funds with the remaining 45% held by the exchange in Tether (USDT) equivalent tokens.

漏洞发生后，WazirX 试图制定“社会化损失策略”，该策略将使用户获得 55% 的资金，其余 45% 由交易所以 Tether (USDT) 等价代币持有。

However, the proposal was met with widespread outrage, with users accusing the exchange of trying to avoid taking full responsibility for the losses incurred from the hack. Subsequently, WazirX was forced to backtrack on the plan, asking for more time to work on a resolution.

然而，该提议遭到了广泛的愤怒，用户指责交易所试图避免对黑客攻击造成的损失承担全部责任。随后，WazirX 被迫取消该计划，要求更多时间来制定解决方案。