Whale 因网络钓鱼攻击损失了 5500 万美元的 DAI 稳定币

8 月 20 日，一名加密货币用户因遭受网络钓鱼攻击而损失数千万美元。他们向黑客转移了价值 5500 万美元的稳定币

A crypto user lost tens of millions on August 20 after falling victim to a phishing attack. The user transferred $55 million worth of stablecoins into the hacker’s wallet after approving a malicious transaction that aimed to drain their holdings.

8 月 20 日，一名加密货币用户遭受网络钓鱼攻击，损失数千万美元。用户在批准旨在耗尽其持有资产的恶意交易后，将价值 5500 万美元的稳定币转入黑客的钱包。

The transaction occurred when the user confirmed an unknown transaction request on the Maker protocol, a DeFi stablecoin lending dapp (decentralized application). Upon signing the transaction, the user lost the millions they held in the DAI stablecoin. They attempted to send the assets associated with this malicious transaction to another wallet. However, the first transaction routing the assets to the bad actor’s wallet went through, leaving them with massive losses and a very expensive lesson.

当用户在 Maker 协议（一个 DeFi 稳定币借贷 dapp（去中心化应用程序））上确认未知交易请求时，交易发生。签署交易后，用户损失了他们在 DAI 稳定币中持有的数百万美元。他们试图将与此恶意交易相关的资产发送到另一个钱包。然而，第一笔将资产转移到坏人钱包的交易成功了，给他们带来了巨大的损失和非常昂贵的教训。

That lesson is to never confirm any transaction request that comes from an unknown source. Users must check each transaction and ensure what they entail before signing them. Blockchain analytics firm Lookonchain echoed the same sentiments as it posted on X, “When you sign a transaction, always double-check before clicking “confirm” and do not sign unknown transactions.”

这个教训是永远不要确认任何来自未知来源的交易请求。用户在签署之前必须检查每笔交易并确保其内容。区块链分析公司 Lookonchain 也表达了与 X 上发布的观点相同的观点，“当您签署交易时，请务必在单击“确认”之前仔细检查，并且不要签署未知交易。”

It also reported on the hack, stating, “The whale carelessly signed an unknown transaction 13 hours ago, setting the owner of his 55.47M $DAI in Maker to the phishing address “0x0000db5c…41e70000.” The hacker acted swiftly after their exploit to “set the owner to a newly created address “0x5D4b” and withdrew the 54.47M $DAI.” They then exchanged “27.5M $DAI for 10,625 $ETH.” Bad actors often convert their ill-gotten proceeds to ETH to use in crypto mixers and cover their tracks.

它还报道了此次黑客攻击，指出“鲸鱼在​​ 13 小时前不小心签署了一笔未知交易，将 Maker 中 5547 万美元 DAI 的所有者设置为钓鱼地址“0x0000db5c…41e70000”。黑客在利用该漏洞后迅速采取行动，“将所有者设置为新创建的地址“0x5D4b”，并撤回了 5447 万美元的 DAI。”然后他们将“2750 万美元 DAI 换成 10,625 美元 ETH”。不良行为者经常将他们的不义之财转换为 ETH，用于加密货币混合器并掩盖他们的踪迹。

Phishing Attacks Are on the RisePhishing attacks are rising in the crypto space as hackers try to pull a fast one over unsuspecting users. They can occur in multiple ways, including malicious transaction requests. Otherwise, bad actors convince users to download malware capable of stealing private key information or manipulating transactions to route funds to destinations that users did not add as recipient addresses. A CertiK report from July revealed the first half of 2024 witnessed $498 million exploited through phishing attacks.

网络钓鱼攻击不断增加随着黑客试图对毫无戒心的用户发起快速攻击，加密货币领域的网络钓鱼攻击不断增加。它们可以通过多种方式发生，包括恶意交易请求。否则，不良行为者会诱骗用户下载能够窃取私钥信息或操纵交易的恶意软件，以将资金路由到用户未添加为收件人地址的目的地。 CertiK 7 月的一份报告显示，2024 年上半年，网络钓鱼攻击造成的损失达 4.98 亿美元。