某 CEX Commerce 页面要求用户输入助记词,安全研究人员警示存在严重安全隐患

Gate News 消息,3 月 19 日,某 CEX Commerce 的一个子域名页面出现提示用户输入钱包助记词的操作流程,引发安全研究人员关注。SlowMist 余弦表示,无法理解该交易所为何设置此类页面,直接要求用户以明文形式输入助记词进行资产恢复,认为此举存在严重安全隐患。链上分析师 ZachXBT 指出,该页面曾被某 CEX 的一篇 Commerce 产品帮助文档引用,文档建议用户通过导入助记词至某 CEX Wallet 或 MetaMask 等兼容钱包来恢复资金,并附有指向该子域名提款工具的链接。目前该帮助文档已显示被删除。ZachXBT 同时指出,该页面若被恶意行为者利用,可对该交易所用户实施助记词社会工程攻击。

Disclaimer: The information on this page may come from third parties and does not represent the views or opinions of Gate. The content displayed on this page is for reference only and does not constitute any financial, investment, or legal advice. Gate does not guarantee the accuracy or completeness of the information and shall not be liable for any losses arising from the use of this information. Virtual asset investments carry high risks and are subject to significant price volatility. You may lose all of your invested principal. Please fully understand the relevant risks and make prudent decisions based on your own financial situation and risk tolerance. For details, please refer to Disclaimer.
Commento
0/400
Nessun commento