Dramatisk\u0101 finansi\u0101l\u0101 neveiksme<\/p>\n
Kriptoval\u016btu treideris piedz\u012bvojis gandr\u012bz 50 miljonu ASV dol\u0101ru zaud\u0113jumus USDT stabilaj\u0101s mon\u0113t\u0101s p\u0113c tam, kad k\u013cuva par t\u0101 d\u0113v\u0113t\u0101s \u201cadreses saind\u0113\u0161anas\u201d (address poisoning) sh\u0113mas upuri. \u0160\u012b, \u0161\u0137ietami vienk\u0101r\u0161\u0101 metode, joproj\u0101m m\u0113dz no\u0137ert neuzman\u012bgus tirgot\u0101jus. Negad\u012bjums noticis, kad treideris m\u0113\u0123in\u0101jis p\u0101rskait\u012bt l\u012bdzek\u013cus no Binance bir\u017eas uz savu person\u012bgo maku.<\/p>\n
K\u0101 zi\u0146o onchain anal\u012btikas platforma Lookonchain, 20. decembr\u012b cietu\u0161ais p\u0101rskait\u012bjis 49 999 950 USDT adres\u0113, kuru kontrol\u0113ja uzbruc\u0113js. Standarta proced\u016bra paredz, ka upuris vispirms veic nelielu, test\u0113\u0161anas m\u0113r\u0137a, transakciju \u2013 \u0161aj\u0101 gad\u012bjum\u0101 50 USDT \u2013 uz galam\u0113r\u0137a adresi.<\/p>\n
Skaidrojums par sare\u017e\u0123\u012bto kr\u0101p\u0161anas sh\u0113mu<\/p>\n
\u0160aj\u0101 moment\u0101 uzbruc\u0113ja kontrol\u0113ts automatiz\u0113ts skripts nekav\u0113joties \u0123ener\u0113ja \u201cviltus\u201d maka adresi. T\u0101 tika izveidota t\u0101, lai t\u0101s alfanumerisk\u0101s virknes s\u0101kums un beigas maksim\u0101li l\u012bdzin\u0101tos upura re\u0101lajai adresei. Viltus adreses pirm\u0101s piecas un p\u0113d\u0113j\u0101s \u010detras rakstz\u012bmes sakrita ar upura adreses parametriem. Galven\u0101s at\u0161\u0137ir\u012bbas sl\u0113p\u0101s vid\u016b, ko maka interfeisi bie\u017ei vien sl\u0113pj, lai uzlabotu salas\u0101m\u012bbu, r\u0101dot tikai tr\u012bs punkti\u0146us.<\/p>\n
P\u0113c tam uzbruc\u0113js veica nelielas transakcijas no \u0161\u012bs viltus adreses uz upura maku, efekt\u012bvi \u201csaind\u0113jot\u201d vi\u0146a transakciju v\u0113sturi. Kad treideris v\u0113l\u0101k, gatavojoties pilnam 50 miljonu dol\u0101ru p\u0101rskait\u012bjumam, kop\u0113ja adresi no v\u0113stures, vi\u0146\u0161, ac\u012bmredzot, nepamanot, izv\u0113l\u0113j\u0101s uzbruc\u0113ja viltus adresi. Etherscan dati liecina, ka test\u0113\u0161anas transakcija veikta 3:06 UTC, bet k\u013c\u016bdainais 50 miljonu dol\u0101ru p\u0101rskait\u012bjums notika aptuveni 26 min\u016btes v\u0113l\u0101k, pulksten 3:32 UTC.<\/p>\n
L\u012bdzek\u013cu atmazg\u0101\u0161ana un m\u0113\u0123in\u0101jums tos atg\u016bt<\/p>\n
Uzbruc\u0113js nekav\u0113j\u0101s r\u012bkoties. 30 min\u016b\u0161u laik\u0101 p\u0113c l\u012bdzek\u013cu sa\u0146em\u0161anas vi\u0146\u0161 visu summu konvert\u0113ja uz DAI, izmantojot MetaMask Swap. \u0160is bija strat\u0113\u0123isks solis, jo Tether (USDT) var iesald\u0113t l\u012bdzek\u013cus konkr\u0113t\u0101s adres\u0113s, savuk\u0101rt decentraliz\u0113tajam stabilajam nodro\u0161in\u0101jumam DAI \u0161\u0101di centraliz\u0113ti ierobe\u017eojumi nav.<\/p>\n
T\u0101l\u0101k uzbruc\u0113js konvert\u0113ja DAI aptuveni 16 690 ETH (Ethereum) un ievietoja apm\u0113ram 16 680 ETHTornado Cash \u2013 agr\u0101k sankcion\u0113t\u0101 kriptoval\u016btu miksera platform\u0101, lai aizmiglotu transakciju p\u0113das.<\/p>\n
Centienos atg\u016bt zaud\u0113to, cietu\u0161ais nos\u016bt\u012bja onchain zi\u0146ojumu uzbruc\u0113jam, pied\u0101v\u0101jot 1 miljonu dol\u0101ru atl\u012bdz\u012bbu balto hakeru (white hat hackers) pakalpojumiem pret\u012b par 98% nozagt\u0101 \u012bpa\u0161uma atdo\u0161anu.<\/p>\n
Precedenti un n\u0101kotne<\/p>\n
\u0160is zaud\u0113jums atbalso l\u012bdz\u012bgu gad\u012bjumu no 2024. gada maija, kad \u0161\u0101d\u0101 veid\u0101 lietot\u0101js zaud\u0113ja 71 miljonu dol\u0101ru Wrapped Bitcoin (WBTC). Toreiz cietu\u0161ais v\u0113l\u0101k atg\u016bva gandr\u012bz visus l\u012bdzek\u013cus p\u0113c onchain sarun\u0101m, kur\u0101s iesaist\u012bj\u0101s kiberdro\u0161\u012bbas uz\u0146\u0113mums Match Systems un bir\u017ea Cryptex.<\/p>\n
Vai p\u0113d\u0113jam upurim izdosies sasniegt l\u012bdz\u012bgu rezult\u0101tu, pagaid\u0101m nav zin\u0101ms, \u0146emot v\u0113r\u0101 l\u012bdzek\u013cu \u0101tro p\u0101rvieto\u0161anu uz Tornado Cash. \u0160is incidents ir viens no liel\u0101kajiem \u201cadreses saind\u0113\u0161anas\u201d rezult\u0101t\u0101 re\u0123istr\u0113tajiem zaud\u0113jumiem, un tas pievienojas \u0161\u012b gada kop\u0113jiem kriptoval\u016btu z\u0101dz\u012bb\u0101m, kas p\u0101rsniedz 3,4 miljardus dol\u0101ru.<\/p>\n","protected":false},"excerpt":{"rendered":"Dramatisk\u0101 finansi\u0101l\u0101 neveiksme Kriptoval\u016btu treideris piedz\u012bvojis gandr\u012bz 50 miljonu ASV dol\u0101ru zaud\u0113jumus USDT stabilaj\u0101s mon\u0113t\u0101s p\u0113c tam, kad…\n","protected":false},"author":2,"featured_media":84104,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[16],"tags":[21227,77,76,21230,3578,35,39,38,36,37,34,40,21229,21228],"class_list":{"0":"post-84103","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-bizness","8":"tag-adreses-saindesana","9":"tag-bizness","10":"tag-business","11":"tag-kriptotrekderis","12":"tag-kriptovalutu-krapsana","13":"tag-latvia","14":"tag-latvian","15":"tag-latviesu","16":"tag-latviesu-valoda","17":"tag-latviesuvaloda","18":"tag-latvija","19":"tag-lv","20":"tag-tornado-cash","21":"tag-usdt-zaudejumi"},"share_on_mastodon":{"url":"https:\/\/pubeurope.com\/@lv\/115768653723099024","error":""},"_links":{"self":[{"href":"https:\/\/www.europesays.com\/lv\/wp-json\/wp\/v2\/posts\/84103","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.europesays.com\/lv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.europesays.com\/lv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/lv\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/lv\/wp-json\/wp\/v2\/comments?post=84103"}],"version-history":[{"count":0,"href":"https:\/\/www.europesays.com\/lv\/wp-json\/wp\/v2\/posts\/84103\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/lv\/wp-json\/wp\/v2\/media\/84104"}],"wp:attachment":[{"href":"https:\/\/www.europesays.com\/lv\/wp-json\/wp\/v2\/media?parent=84103"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.europesays.com\/lv\/wp-json\/wp\/v2\/categories?post=84103"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.europesays.com\/lv\/wp-json\/wp\/v2\/tags?post=84103"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}