Drift Protocol 遭新型攻击损失约 2.8 亿美元,管理权限被接管

Gate News 消息,4 月 2 日,Drift Protocol 发布声明称,早些时候一名恶意行为者通过涉及 durable nonce 的新型攻击手段获得未授权访问,迅速接管了 Drift 安全委员会的管理权限。该攻击手法高度复杂,攻击者历时数周准备,利用 durable nonce 账户对交易进行预签名以实现延迟执行。目前调查显示,本次事件并非由 Drift 程序或智能合约漏洞引起,也无证据表明助记词被盗,攻击者疑似通过未授权或伪造的交易批准获得权限,可能涉及社会工程学手段。此次攻击导致协议约 2.8 亿美元资金被提取,所有借贷资金、金库存款及交易资金均受影响。DSOL(未存入 Drift 的部分,包括质押至 Drift 验证者的资产)以及保险基金资产不受影响,后者目前正被提取以进行保护。作为预防措施,Drift 已冻结所有剩余协议功能,并更新多签移除受损钱包。

Disclaimer: The information on this page may come from third parties and does not represent the views or opinions of Gate. The content displayed on this page is for reference only and does not constitute any financial, investment, or legal advice. Gate does not guarantee the accuracy or completeness of the information and shall not be liable for any losses arising from the use of this information. Virtual asset investments carry high risks and are subject to significant price volatility. You may lose all of your invested principal. Please fully understand the relevant risks and make prudent decisions based on your own financial situation and risk tolerance. For details, please refer to Disclaimer.
Opmerking
0/400
Geen opmerkingen