Anon\u012bmais hakeris izvada ETH no Aave<\/p>\n
Neatkl\u0101ts hakeris, kas kontrol\u0113 kompromit\u0113tu Ethereum multi-parakstu (multisig) maku, bez aiz\u0137er\u0161an\u0101s turpina novirz\u012bt nozagtos l\u012bdzek\u013cus. Vi\u0146\u0161 atkal iz\u0146\u0113mis 1000 ETH no decentraliz\u0113t\u0101s aizdevumu protokola Aave un izt\u012br\u012bjis tos, izmantojot Tornado Cash. To zi\u0146o blok\u0137\u0113\u017eu dro\u0161\u012bbas uz\u0146\u0113mums PeckShield.<\/p>\n
Kop\u0113jais caur Tornado Cash izlaisto l\u012bdzek\u013cu apjoms sasniedzis 6300 ETH, kas ir aptuveni 19,4 miljoni ASV dol\u0101ru. \u0160is incidents s\u0101k\u0101s ar priv\u0101to atsl\u0113gu kompromit\u0113\u0161anu, par ko publiski tika zi\u0146ots decembra vid\u016b.<\/p>\n
Strat\u0113\u0123isk\u0101 l\u012bdzek\u013cu iz\u0146em\u0161ana<\/p>\n
Uzbruc\u0113js joproj\u0101m kontrol\u0113 ETH \u201cleveraged long\u201d poz\u012bciju Aave, kas saist\u012bta ar uzlauzto multi-parakstu maku. Saska\u0146\u0101 ar PeckShield datiem, hakeris, kas p\u0101r\u0146\u0113mis kontroli p\u0101r kompromit\u0113to multi-parakstu maku, papildus iz\u0146\u0113mis 1000 ETH no Aave un izt\u012br\u012bjis tos caur Tornado Cash, palielinot kop\u0113jo summu, kas novirz\u012bta priv\u0101tuma mikserim, l\u012bdz 6300 ETH. P\u0113d\u0113j\u0101 iz\u0146em\u0161ana notika no atv\u0113rt\u0101s poz\u012bcijas Aave, kur uzbruc\u0113js joproj\u0101m kontrol\u0113 ETH \u201cleveraged long\u201d poz\u012bciju.<\/p>\n
Otrdien PeckShield zi\u0146oja platform\u0101 X, ka kop\u0113j\u0101 no \u0161\u012b maka izt\u012br\u012bt\u0101 \u0113tera summa ir aptuveni 19,4 miljoni ASV dol\u0101ru. Tas ir da\u013ca no pla\u0161\u0101ka uzbrukuma, kura rezult\u0101t\u0101 decembr\u012b tika nozagti aptuveni 27,3 miljonu ASV dol\u0101ru v\u0113rti akt\u012bvi p\u0113c tam, kad tika kompromit\u0113tas multi-parakstu maka priv\u0101t\u0101s atsl\u0113gas.<\/p>\n
Izpratne par notikumu<\/p>\n
Kompromit\u0113tais maks ir Gnosis Safe multi-parakstu adrese, kas identific\u0113ta k\u0101 \u201c0x1fC\u2026d23Ac\u201d. T\u0101 nav saist\u012bta ar pa\u0161u Aave un, visticam\u0101k, pieder priv\u0101tam \u201cva\u013ciem\u201d (whales – lieliem kriptoval\u016btu tur\u0113t\u0101jiem).<\/p>\n
Blok\u0137\u0113\u017eu dati, uz kuriem atsaucas PeckShield, liecina, ka uzbruc\u0113js joproj\u0101m tur \u201cleveraged long\u201d poz\u012bciju 9,75 miljonu ASV dol\u0101ru v\u0113rt\u012bb\u0101: aptuveni 20,5 miljoni ASV dol\u0101ru ETH ir nodro\u0161in\u0101jums pret aptuveni 10,7 miljoniem ASV dol\u0101ru, kas aiz\u0146emti DAI. Poz\u012bcija joproj\u0101m ir maks\u0101tsp\u0113j\u012bga, ta\u010du k\u013c\u016bst arvien neaizsarg\u0101t\u0101ka, ja main\u012bsies tirgus apst\u0101k\u013ci.<\/p>\n
Tornado Cash un \u201cl\u0113n\u0101 nopl\u016bde\u201d<\/p>\n
PeckShield pirmo reizi publiski zi\u0146oja par \u0161o incidentu 18. decembr\u012b. Toreiz caur Tornado Cash jau bija izlaisti aptuveni 4100 ETH, un hakeris saglab\u0101ja kontroli p\u0101r maku un atv\u0113rto poz\u012bciju Aave. Priv\u0101tuma r\u012bki, piem\u0113ram, Tornado Cash, bie\u017ei tiek izmantoti kriptouzbrukumu laik\u0101, lai p\u0101rtrauktu blok\u0137\u0113des transakciju \u0137\u0113des un apgr\u016btin\u0101tu l\u012bdzek\u013cu atg\u016b\u0161anu.<\/p>\n
T\u0101 viet\u0101, lai nekav\u0113joties sl\u0113gtu poz\u012bciju, uzbruc\u0113js to pak\u0101peniski atver \u2013 pa posmiem iz\u0146em nodro\u0161in\u0101jumu un izt\u012bra naudu, atst\u0101jot par\u0101du atv\u0113rtu, lai izvair\u012btos no likvid\u0101cijas. \u0160\u0101da pieeja \u0161\u0137iet k\u0101 \u201cl\u0113n\u0101s nopl\u016bdes\u201d taktika, kuras m\u0113r\u0137is ir maksimiz\u0113t l\u012bdzek\u013cu iz\u0146em\u0161anu ar minim\u0101lu piespiedu likvid\u0101cijas risku DeFi protokolos.<\/p>\n
Cietu\u0161\u0101s puses identit\u0101te nav atkl\u0101ta, un nek\u0101di protokolu kases nav biju\u0161i saist\u012bti ar \u0161o maku. Adreses aktivit\u0101ti var publiski izsekot Etherscan \u2013 t\u0101 demonstr\u0113 turpm\u0101ku mijiedarb\u012bbu ar Aave l\u012bgumiem un iemaksas Tornado Cash. Par pla\u0161iem l\u012bdzek\u013cu atg\u016b\u0161anas centieniem netiek zi\u0146ots, un \u201cleveraged\u201d poz\u012bcijas ilgtermi\u0146a izn\u0101kums paliek nenoteikts.<\/p>\n","protected":false},"excerpt":{"rendered":"Anon\u012bmais hakeris izvada ETH no Aave Neatkl\u0101ts hakeris, kas kontrol\u0113 kompromit\u0113tu Ethereum multi-parakstu (multisig) maku, bez aiz\u0137er\u0161an\u0101s turpina…\n","protected":false},"author":2,"featured_media":105510,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[16],"tags":[25277,77,25278,76,3349,25276,35,39,38,36,37,34,40,21229],"class_list":{"0":"post-105666","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-bizness","8":"tag-aave","9":"tag-bizness","10":"tag-blokkezu-drosiba","11":"tag-business","12":"tag-ethereum","13":"tag-kriptohakeris","14":"tag-latvia","15":"tag-latvian","16":"tag-latviesu","17":"tag-latviesu-valoda","18":"tag-latviesuvaloda","19":"tag-latvija","20":"tag-lv","21":"tag-tornado-cash"},"share_on_mastodon":{"url":"https:\/\/pubeurope.com\/@lv\/115899657297955022","error":""},"_links":{"self":[{"href":"https:\/\/www.europesays.com\/lv\/wp-json\/wp\/v2\/posts\/105666","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.europesays.com\/lv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.europesays.com\/lv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/lv\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/lv\/wp-json\/wp\/v2\/comments?post=105666"}],"version-history":[{"count":0,"href":"https:\/\/www.europesays.com\/lv\/wp-json\/wp\/v2\/posts\/105666\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/lv\/wp-json\/wp\/v2\/media\/105510"}],"wp:attachment":[{"href":"https:\/\/www.europesays.com\/lv\/wp-json\/wp\/v2\/media?parent=105666"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.europesays.com\/lv\/wp-json\/wp\/v2\/categories?post=105666"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.europesays.com\/lv\/wp-json\/wp\/v2\/tags?post=105666"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}