Web2.0旧疾难去，Premint NFT被盗事件分析

CertikPublicado a 2022-07-18Actualizado a 2022-07-18

Resumen

北京时间2022年7月17日，CertiK安全团队监测到知名NFT平台Premint NFT官网被入侵后于今日遭受黑客攻击。导致了约37.5万美元的损失。

北京时间2022年7月17日，CertiK安全团队监测到知名NFT平台Premint NFT官网被入侵后于今日遭受黑客攻击。导致了约37.5万美元的损失。

漏洞分析

黑客将恶意JavaScript代码上传至项目官网https://premint.xyz，恶意代码通过URL注入网站：https://s3-redwood-labs-premint-xyz[.]com/cdn.min.js?v=1658046560357，目前域名服务器不再存在，因此恶意文件不再可用。

该攻击导致用户在将他们的钱包连接到该网站时会被指示 "全部批准（set approvals for all）"，从而使得攻击者可访问钱包中的资产。

链上分析

有六个外部拥有账户 (EOAs)与此次攻击直接相关⬇️

0x28733...

0x0C979...

0x4eD07...

0x4499b...

0x99AeB...

0xAAb00...

根据CertiK的评估，此次攻击开始于北京时间7月17日下午03:25，即为第一批被盗的NFT进入两个黑客账户的时间——恶意代码也许正是此时被上传至项目官网的。

一位用户声称2个Goblintown NFTs被盗

在OpenSea上搜索这两个NFT，可以看到它们是如何交易的。同样，也可以通过搜索找到窃取NFT的钱包——EOA 0x0C979…

通过监测NFT的流动，我们发现该钱包完美符合Discord网络钓鱼攻击的典型模式：大量资产流入，随后被迅速抛售。该钱包的第一笔入账交易来自0xAAb00F……，其也为0x28733……提供了资金。

重复上述检测，可以确认0x28733……也参与了黑客攻击。

一名受害者发帖称，他们的Moonbirds Oddities被盗

在Etherscan搜索用户名称，显示Moonbird NFT被交易至EOA 0x28733……

该地址的流动模式与EOA 0x0C979…相同——大量资产流入，随后被迅速抛售。

这两个钱包地址共计盗取了包括BAYC、Otherside、Globlintownm在内的314个NFT（价值约37.5万美元），

针对这次攻击，Premint的推特账户发布了一个警告：不要签署“全部批准（set approvals for all）”的交易，并指示那些怀疑自己被黑客攻击的用户如何联系revoke.cash来取回他们的资产。

目前幸运的是其中两个外部账户似乎已经被发现。受害者正在联系revoke.cash以取回他们的资金。

资产去向

272 ETH (价值约37万美元) 目前存储于：https://etherscan.io/address/0x99aeb028e43f102c5776f6b652952be540826bf4。

其余2.68 ETH（价值约3636美元）存储于：https://etherscan.io/address/0xaab00f612d7ded169e51cf0142d48ff560f281f3

此次攻击事件的部分黑客交易尚在等待处理中。

写在最后

The Bored Ape Yacht Club NFT (BAYC) 网络钓鱼攻击事件（损失约31.9万美元）及NFT艺术家 Beeple的Twitter账户被盗事件（导致其粉丝损失了价值约43.8万美元的NFT和加密货币）已充分说明了Web2.0在中心化问题上的脆弱性。

为了避免这种情况的发生，Web3.0项目应该始终围绕中心化风险和单点故障建立去中心化措施——多重签名、要求多个用户在访问特权账户时进行身份验证，并在每次交互后撤销特权。

Lecturas Relacionadas

PEPE Flashes Selling Climax Signal, What This Means For Price

PEPE, a meme coin, has been struggling with bearish pressure since its October 10 crash, showing muted price movements. However, technical analysis suggests a potential shift to a bullish trend. A key indicator is the formation of a Selling Climax (SC), where buying pressure overwhelmed selling, signaling the end of the bearish phase and a transition into accumulation. Additionally, a Change of Character (CHoCH) indicates a shift from a bearish to a bullish structure, with momentum favoring buyers. Other positive signs include an Automatic Rally trend and a Last Point of Support, suggesting bulls are regaining control. A Point of Interest (POI) analysis identifies a potential bounce-off level at $0.00000326 for a rally, with a possible peak around $0.0000062, representing a potential 60%+ price increase. This suggests a significant upward move may be imminent for PEPE.

bitcoinistHace 47 min(s)

PEPE Flashes Selling Climax Signal, What This Means For Price

bitcoinistHace 47 min(s)

The End of the Crypto Premium? Market Logic Shift Seen Through Gemini's Post-IPO Struggles

The article "The End of the Crypto Premium? Market Logic Shifts as Gemini Struggles Post-IPO" examines the dramatic downturn of cryptocurrency exchange Gemini following its public listing in September 2025. Initially part of a wave of crypto IPOs, including Bullish, which saw soaring valuations and massive investor interest, Gemini's stock price has since collapsed by over 80%, falling from $28 to around $5. The company has cut 30% of its workforce, exited international markets, and faces significant financial strain, including $330 million in Bitcoin-denominated debt. The core argument is that Gemini's struggles reflect a broader market shift where the "excess premium" once associated with crypto assets is disappearing. Two key factors are identified: the erosion of regulatory arbitrage, as compliance costs rise for all players (up 22.5% for small firms in 2026), and the decline of liquidity scarcity premiums, as institutional investors now access crypto via low-friction ETFs and stocks rather than volatile altcoins. The approval of Bitcoin and other crypto ETPs, which now manage $1.8 trillion globally, has diverted institutional capital away from altcoins, causing their liquidity to dry up and volatility to increase. For Gemini, its strategy of being "the most compliant exchange" became a liability in a bear market, as fixed compliance costs remained high while trading revenue fell. The article concludes that the era of narrative-driven crypto valuations is ending, giving way to a market logic focused on fundamentals like actual usage, liquidity depth, and sustainable institutional adoption.

marsbitHace 3 hora(s)

The End of the Crypto Premium? Market Logic Shift Seen Through Gemini's Post-IPO Struggles

marsbitHace 3 hora(s)

Expanding Glassnode: Macro and Traditional Finance Data

Glassnode is expanding its product offering to include macroeconomic and traditional finance (TradFi) data, recognizing that digital assets like Bitcoin are now a mainstream asset class increasingly influenced by global financial forces. As institutional participation grows—evidenced by Bitcoin ETFs surpassing $100 billion in AUM by early 2026—Bitcoin's price is more affected by monetary policy, geopolitical risks, and macroeconomic trends. Key metrics now integrated include central bank balance sheets, money supply (M2), interest rates, and government bond yields, which help contextualize Bitcoin within global liquidity cycles. The platform also tracks equity indices, fear gauges, forex rates, and commodities to assess risk appetite and market stress. This shift reflects a structural change: Bitcoin's correlation with traditional risk assets like the S&P 500 has strengthened, driven by institutional capital, post-COVID liquidity cycles, and ETF adoption. Glassnode aims to provide a unified platform for analyzing both on-chain and TradFi data, enabling users to better interpret market moves and regime shifts in a maturing digital asset ecosystem.

insights.glassnodeHace 5 hora(s)

Expanding Glassnode: Macro and Traditional Finance Data

insights.glassnodeHace 5 hora(s)

Analysts Outline a Price Path for Ozak AI That Shows Gradual Expansion Toward the $6 Range

Ozak AI ($OZ), an AI cryptocurrency token combining AI technologies with decentralized physical infrastructure networks (DePIN), is gaining attention for its utility-driven growth approach. Currently in an advanced presale stage with over $6 million raised, the token is priced at $0.014. Analysts highlight its focus on automation, analytics, and scalability rather than hype, supported by strategic partnerships with entities like SINT, Hive Intel, and Pyth Network. These collaborations enhance functionality, data streaming, and liquidity. A gradual price expansion toward the $6 range is projected, driven by adoption, staking, and ecosystem development rather than short-term speculation.

TheNewsCryptoHace 5 hora(s)

Analysts Outline a Price Path for Ozak AI That Shows Gradual Expansion Toward the $6 Range

TheNewsCryptoHace 5 hora(s)

Utexo Partners with x402 to Provide Near-Instant USDT Settlement for the Agent Economy

Utexo, a Bitcoin-native stablecoin payment execution and settlement layer, has partnered with x402 to integrate USDT compatibility into the x402 payment protocol. This collaboration enables near-instant settlement for agent-to-agent transactions, with speeds as fast as 50 milliseconds. x402 is an open protocol that uses the HTTP 402 "Payment Required" status code to embed payment functionality directly into HTTP requests. This allows applications, APIs, and autonomous systems to pay for services in real-time without requiring pre-funded accounts. The integration expands x402’s initial USDC support to include USDT, one of the most widely used stablecoins globally. Utexo’s infrastructure is designed for high-frequency, low-latency transactions, making it well-suited for machine-driven payments. According to Utexo CEO Viktor Ihnatiuk, supporting USDT within the x402 framework significantly broadens access and provides developers the performance needed for real-time agent-based systems. Kevin Leffew of x402 at Coinbase added that expanding stablecoin access improves performance and accelerates developer adoption. This partnership supports growing use cases where software systems autonomously conduct transactions—such as paying for API calls, accessing data on-demand, and coordinating services across platforms without human intervention. By combining x402’s protocol with Utexo’s settlement infrastructure, the collaboration enables a payment model where transactions are as fast and efficient as the requests that trigger them.

marsbitHace 6 hora(s)

Utexo Partners with x402 to Provide Near-Instant USDT Settlement for the Agent Economy

marsbitHace 6 hora(s)

Trading

Spot
Futuros
活动图片