Индонезийскую биржу Indodax взломали на более чем $18 млн

cryptonews.ruPubblicato 2024-05-11Pubblicato ultima volta 2024-09-11

Криптобиржа Indodax столкнулась с инцидентом безопасности.
По данным аналитиков, с кошельков Indodax вывели криптовалюту на $18,2 млн.
Компания заверила клиентов, что их средства находятся в безопасности.

11 сентября 2024 года индонезийская криптовалютная биржа пострадала от хакерской атаки. Об эксплойте сообщили специалисты PeckShield, обнаружив крупные оттоки криптовалюты с кошельков платформы на сумму около $15,7 млн.

#PeckShieldAlert Large outflow of cryptos (worth ~$15.7m) from @indodax on #Ethereum, #Polygon & #Optimism
The funds are now parked at the following address:#Ethereum 0x5910…48Df8 (5,204.3 $ETH)#Polygon 0x90Ff…904f (6,843,716.17 $POL)#Optimism 0x3B8F…eB6d (~380 $ETH) pic.twitter.com/li7Dwc9nfJ
— PeckShieldAlert (@PeckShieldAlert) September 11, 2024

Аналитики выяснили, что с адресов биржи вывели 5204 ETH в сети Ethereum, 6,84 млн Polygon (POL) и около 380 ETH в сети Optimism.

Также об инциденте сообщила команда Cyvers. Согласно заявлению, после нескольких подозрительных транзакций адрес предполагаемого злоумышленника начал обменивать токены на Ethereum.

🚨ALERT📷Hey @indodax , Our system has detected multiple suspicious transactions involving your wallets on different networks. Suspicious address already holds 14.4 million USD and swapping the tokens to Ether.

Want to keep your company off our alerts radar? Learn how to secure… pic.twitter.com/Lzpi5uthXS
— 🚨 Cyvers Alerts 🚨 (@CyversAlerts) September 10, 2024

В общей сложности специалисты Cyvers выявили более 150 переводов средств, связанных с этим эксплойтом. По их данным, общий объем убытков оценивается в $18,2 млн.

Indodax подтвердила наличие потенциальных проблем безопасности на своей платформе:

Halo Member INDODAX,

Kami ingin menginformasikan bahwa team security kami menemukan potensi indikasi keamanan pada platform kami.

Saat ini, kami sedang melakukan pemeliharaan menyeluruh untuk memastikan seluruh sistem beroperasi dengan baik. Selama proses pemeliharaan ini,… pic.twitter.com/kYAc6ilERF
— indodax (@indodax) September 11, 2024

«В настоящее время мы проводим полное техническое обслуживание, чтобы убедиться, что система работает должным образом. Во время этого процесса сайт и приложение Indodax временно недоступны», — заявили представители платформы.

При этом в компании добавили, что средства клиентов «защищены на 100%» как в криптовалютах, так и в рупиях.

Похожий случай произошел в июле 2024 года, когда индийская криптобиржа WazirX подверглась взлому на $235 млн. Позже злоумышленники отмыли часть украденных средств через криптомиксер Tornado Cash.

Letture associate

How Ethereum’s ‘Lean’ roadmap could reshape ETH over the next 4 years

Ethereum has entered a new development phase with the introduction of the 'Lean Ethereum' roadmap, a multi-year overhaul aiming to reshape the network's core protocol over the next 3-4 years. The plan focuses on major technical upgrades to improve scalability, security, and long-term resilience. Key components include implementing recursive STARKs, quantum-safe cryptography to guard against future threats, a multidimensional gas model, and a redesigned state architecture using Verkle trees. These changes aim to significantly increase transaction throughput, lower costs, and improve finality speed while maintaining backward compatibility. Infrastructure development is already underway, with initiatives like post-quantum secure devnets and the Glamsterdam upgrade laying the groundwork. Efforts are also focused on scalable state management and increasing the network's gas limits. The overarching goal is to future-proof Ethereum, enabling it to scale efficiently and securely throughout the next decade with minimal disruption to existing applications.

ambcrypto11 min fa

How Ethereum’s ‘Lean’ roadmap could reshape ETH over the next 4 years

ambcrypto11 min fa

Germany’s banking giants bring crypto to 80M customers – Why it matters

Germany's two largest banking networks, Sparkassen and Volksbanken Raiffeisenbanken, are integrating cryptocurrency trading directly into their banking apps, potentially reaching around 80 million customers. This marks a major shift as these groups previously deemed crypto too risky. They are building their own regulated infrastructure, such as the BaFin-approved "meinKrypto" platform, rather than partnering with external exchanges. While this integration brings crypto to a vast retail audience within a trusted framework, critics warn it could lead inexperienced investors to underestimate the high volatility and risks. Despite a recent decline in retail crypto trading volume, Germany remains a top-ten market. The move signifies a significant step in merging traditional banking with digital assets in Europe.

ambcrypto1 h fa

Germany’s banking giants bring crypto to 80M customers – Why it matters

ambcrypto1 h fa

Aerodrome Finance: Can AERO target $0.65 after a 22% weekly rally?

Aerodrome Finance (AERO) has rallied strongly, gaining 22% in the past week. After holding support at $0.45, the altcoin reached $0.60 for the first time since January and was trading at $0.58 at the time of writing. Technical indicators show bullish momentum, with the RSI at 67 and the DMI Modified indicator rising sharply, suggesting a strengthening uptrend. This price movement is supported by significant market demand. Open Interest in derivatives surged 10% to $56 million in a day, and spot trading has shown a positive buy-sell delta over recent days, with net exchange flow turning negative, indicating accumulation. Analysts suggest that if bullish pressure continues, AERO could target $0.65. However, a failure to sustain above $0.60 could weaken the trend, potentially leading to a retest of the $0.46-$0.50 support zone.

ambcrypto2 h fa

Aerodrome Finance: Can AERO target $0.65 after a 22% weekly rally?

ambcrypto2 h fa

Why the UXLINK hacker’s 14,336 ETH transfers raise fresh questions for DeFi

Recent on-chain activity reveals the UXLINK exploiter is actively laundering stolen funds, complicating tracing efforts. The September 2025 hack, which exploited a 'delegateCall' vulnerability to steal roughly $4.5 million, involved converting illicit assets into DAI and Ethereum. Recently, the attacker swapped over 10 million DAI for approximately 6,000.8 ETH and has deposited a total of 14,336.6 ETH into the privacy mixer Tornado Cash in recent weeks, including over $8.1 million worth in a single move. Simultaneously, wallets connected to the defunct Mining Express Ponzi scheme have been converting long-held assets, swapping 5,004 ETH for 8.8 million DAI. Following a separate exploit of the Jaredfromsubway.eth MEV bot, about $5.1 million was also routed to Tornado Cash. These incidents underscore a critical vulnerability in DeFi: while enabling permissionless transfers, the ecosystem lacks effective mechanisms to halt or manage illicit funds once in motion, allowing them to be moved and concealed relatively easily. This highlights the need for strengthened cross-network coordination and real-time threat detection to better safeguard the space.

ambcrypto4 h fa

Why the UXLINK hacker’s 14,336 ETH transfers raise fresh questions for DeFi

ambcrypto4 h fa

Li Fei-Fei's Latest Long-Form Article: When Video Generation, Robotics, and NVIDIA All Call Themselves World Models, We Need a Taxonomy

In a new article, Dr. Fei-Fei Li addresses the widespread and often inconsistent use of the term "world model" in AI. She proposes a clear, functional taxonomy rooted in the classic Partially Observable Markov Decision Process (POMDP) loop (agent → action → state → observation → agent). According to this framework, current systems called "world models" are different projections of this loop, categorized by their primary output: 1. **Renderers**: Output observations (pixels). Their goal is visual fidelity for human consumption (e.g., video generation models like Sora). They are the most commercially mature but are limited by a focus on appearance over physical accuracy. 2. **Simulators**: Output states (geometric, physical, dynamic representations). They provide a structurally accurate world for both human professionals (e.g., architects) and computational agents (e.g., robots for training). Li argues simulators are the crucial, underappreciated bridge, as they can underpin both rendering and planning. 3. **Planners**: Output actions. Given an observation and a goal, they decide what an agent should do next (e.g., robotic action models). This area is highly promising but remains the least mature for real-world deployment. Li highlights a key trend: the boundaries between these three categories are beginning to blur, as they all rely on a shared underlying understanding of geometry, physics, and dynamics. The logical endpoint is a unified world foundation model capable of switching between rendering, simulation, and planning based on downstream needs. This convergence, she concludes, is central to advancing spatial intelligence—enabling machines not just to talk about the world, but to truly understand, imagine, and interact with it.

marsbit4 h fa

Li Fei-Fei's Latest Long-Form Article: When Video Generation, Robotics, and NVIDIA All Call Themselves World Models, We Need a Taxonomy

marsbit4 h fa

Trading

Spot