ChainCatcher 消息,据 GoPlus 监测,帐户抽象解决方案 Holdstation 遭遇供应链攻击,攻击者窃取开发者会话令牌,绕过双重认证,在应用更新中注入恶意代码,导致用户资金被盗。
此次攻击共造成 462,000 USDT 损失,攻击者地址为 0xcbfA60B39cfAeaE475f649fB6705bD477219bF8d。Holdstation 团队已暂停服务,承诺 100% 赔偿受影响用户,并正与安全团队合作调查事件,同时在链上发布消息,希望通过漏洞赏金计划促使攻击者归还资金。
Disclaimer: The information on this page may come from third parties and does not represent the views or opinions of Gate. The content displayed on this page is for reference only and does not constitute any financial, investment, or legal advice. Gate does not guarantee the accuracy or completeness of the information and shall not be liable for any losses arising from the use of this information. Virtual asset investments carry high risks and are subject to significant price volatility. You may lose all of your invested principal. Please fully understand the relevant risks and make prudent decisions based on your own financial situation and risk tolerance. For details, please refer to
Disclaimer.
Articoli correlati
Resolv Stablecoin Collapses 80% After $23M Exploit
Resolv Labs’ stablecoin USR has crashed hard. The token lost about 80% of its value after a major exploit. The attack took place on March 22. Within hours, USR dropped from near $1 to as low as $0.20. At one point, it even fell lower on some platforms. The attacker used a small amount of funds to
Coinfomania13m fa
穩定幣 USR 閃崩脫鉤!Resolv 爆「鑄幣漏洞」遭駭客捲走 2,500 萬美元
DeFi 協議 Resolv 遭駭客利用漏洞低成本鑄造 8,000 萬枚未抵押穩定幣 USR,套現約 2,500 萬美元,引發幣價脫鉤及借貸市場動蕩。儘管官方稱抵押池無損,但專家指責其權限控管薄弱,缺乏有效安全防護。此次事件揭示出穩定幣的潛在風險與供應通膨對市場的影響。
区块客58m fa
丈夫控妻子竊取 2 千多枚比特幣!法官:原告勝訴機率非常高
英國高等法院近期審理一起比特幣失竊案,原告 Ping Fai Yuen 指控分居妻子 Fun Yung Li 透過偷拍竊取其硬體錢包中的比特幣,價值約1.76億美元。錄音及搜查證據支持原告主張,法院判決維持資產凍結令,但駁回部分訴請。法官認為原告勝訴機率極高,建議盡快開庭。
区块客1h fa
PancakeSwap BCE-USDT 流动性池遭攻击,损失约 67.9 万美元
Gate News 消息,3 月 23 日,据 BlockSec 监测,BSC 链上 PancakeSwap BCE-USDT 流动性池数小时前遭到攻击,损失约 67.9 万美元。攻击原因在于 BCE 代币存在缺陷的销毁机制。攻击者部署了两个恶意合约,成功绕过买卖限制并触发池内代币销毁,导致池子储备比例失衡,最终将 BCE-USDT 池中约 67.9 万美元资金悉数抽空。
GateNews2h fa
谷歌警告:2.7亿iPhone加密钱包被DarkSword威胁,立即升级保护比特币和以太坊资产
谷歌披露iPhone加密钱包的严重漏洞DarkSword,影响约2.7亿设备,主要针对未升级至最新系统的用户。黑客可通过恶意网站获取设备内核级权限,窃取大量敏感数据。苹果已修复相关漏洞,用户需及时更新系统并加强安全措施以保护个人资产。
GateNews2h fa
Crypto Fraudsters Targeted Vizagites, Duped them of ₹35 lakhs
A group of Vizagites lost over ₹35 lakh in a crypto scam, lured by fraudsters promising high returns. Victims were approached through social media, and withdrawal requests were blocked after initial gains. Authorities are investigating under the IT Act.
TheNewsCrypto2h fa