Solana Is Experiencing a Large-Scale Security Incident, What Should You Know?

HuobiPublicado em 2022-08-03Última atualização em 2022-08-05

Resumo

Multiple Solana addresses have succumbed to a widespread attack, as private keys to several wallets have been compromised.

Multiple Solana addresses have succumbed to a widespread attack, as private keys to several wallets have been compromised. Users claim that their wallet funds have been removed without their involvement, more than $8 million worth of SOL, SPL, and other tokens have been siphoned out.

Funds have been transferred to the following 4 addresses:

1：Htp9MGP8Tig923ZFY7Qf2zzbMUmYneFRAhSp7vSg4wxV;

2：CEzN7mqP9xoxn2HdyW6fjEJ73t7qaX9Rp2zyS6hb3iEu;

3：5WwBYgQG6BdErM2nNNyUmQXfcUnB68b6kesxBywh1J3n;

4：GeEccGJ9BEzVbVor1njkBCCiqXJbXVeDHaXDCrBDbmuy.

This article will continue to update:

21:08 UTC (3 August)

Slope Finance declare it will try best to solve &rectify the situation

Slope: No personal data will be stored on centralized servers, internal investigations and audits underway

20:05 UTC (3 August)

Solana Status claims it was Slope who may be responsible for this accident

08:39 UTC (3 August)

Laine repeated that the attack may still underway.

08:26 UTC(3 August)

@aeyakovenko, co-founder of Solana Labs, tweeted that the attack may target on iOS equipments.

07:39 UTC(3 August)

Move to Earn app Walken declare it was back on tack

06:48 UTC(3 August)

StepN declare it move their Treasury fund to cold wallet.

06:37 UTC (3August)

Solana Status invites those impacted to fill out a survey.

06:47 UTC(3 August)

Walken declare it will fail to load at the moment

06:32 ET (3 August)

Alavanche founder Emin Gün Sirer believe the attack was continuing.

05:57 UTC(3 August)

Laine cautioned that this has nothing to do with authorization. They also recommended users to transfer tokens to CEX or Solana CLI.

05:09UST (3 August)

Solana Status claimed to have discovered a vulnerability that allows malicious actors to steal funds from multiple Solana wallets. As of 01:00 today, approximately 7767 wallets were affected.

00:38UST (3 August)

Well-known developer @0xfoobar said that in addition to Phantom, Slope wallet users have also reported theft, and attacker is stealing both native tokens (SOL) and SPL tokens (USDC). @0xfoobar believe it might have been an upstream dependency supply chain attack.

00:38UST (3 August)

Solana Status stated that there is currently no evidence that hardware wallets will be affected, and follow-up information will be released as soon as the investigation progresses.

00:50UST (3 August)

OtterSec confirmed 5000 have been drained, they added: the attacker is signing for the actual keys, meaning it’s not just a delegate issue.

00:33UST (3 August)

STEPN posted an urgent notice of Solana

00:32 UST (3 August)

Phantom, with the largest SOL users, is actively looking for the solution, and they do not believe it is their problem:

00:08 UST (3 August)

Magic Eden warned that there seems to be a widespread SOL exploit at play that's draining wallets throughout the ecosystem

13:13 UTC (3 August)

Solana Status tweeted that engineers from across several ecosystems, in conjunction with audit and security firms, continue to investigate the root cause of an incident that resulted in approximately 8,000 wallets being drained. This does not appear to be a bug with Solana core code, but in software used by several software wallets popular among users of the network.

Leituras Relacionadas

CryptoQuant Metric Signals Whale Accumulation Near Bitcoin $64K Support

A CryptoQuant analysis indicates a significant spike in Bitcoin's Spot Average Order Size around the $64,000 price support level. This metric, calculated by dividing traded volume by the number of trades, suggests increased activity from larger market participants, potentially signaling whale accumulation during the recent price pullback. While this pattern near a key support zone can imply that sizable buyers are absorbing selling pressure, the report cautions that the metric is not definitive on its own. Large order sizes can sometimes reflect exchange operations rather than directional buying. Therefore, the signal is considered more meaningful when combined with other factors like price stabilization. The observation adds a layer to the market narrative, suggesting the correction has attracted larger capital alongside retail fear. However, it does not guarantee a bottom or a bullish reversal. The $64,000 area remains critical, and Bitcoin's ability to hold this support and advance past resistance will ultimately determine the significance of the accumulation signal amidst ongoing macro and ETF-flow risks.

bitcoinistHá 17m

CryptoQuant Metric Signals Whale Accumulation Near Bitcoin $64K Support

bitcoinistHá 17m

Russia Says "USDC is Usable" While Levying a 3% Fee on It?

In a two-step regulatory move, Russia has announced plans to impose a 3% fee on certain "unfriendly" foreign digital assets like USDC and USDT, while simultaneously adding them to its list of legally recognized cryptocurrencies. This approach, described by the article as akin to a customs authority taxing high-risk currency imports, reflects Russia's broader strategy to control rather than ban crypto. The new fee acts as a risk premium for assets deemed vulnerable to freezing by Western jurisdictions. Concurrently, Russia is promoting alternatives like stablecoins pegged to the ruble or friendly currencies, which would face lower or no fees. This regulatory push is timed against escalating international sanctions, particularly from the EU, which aims to restrict Russia's access to global crypto services. By establishing its own regulated framework ahead of potential external blockades, Russia seeks to secure a controlled financial channel, reducing dependence on dollar-linked assets. The situation highlights crypto's evolving role from an investment vehicle to a geopolitical tool, where control over its rules equates to control over financial flows.

marsbitHá 45m

Russia Says "USDC is Usable" While Levying a 3% Fee on It?

marsbitHá 45m

Bitcoin Remains Below Glassnode’s $77,200 True Market Mean

Glassnode's latest report indicates Bitcoin continues to trade below its "True Market Mean," a key on-chain model estimating the average acquisition price of economically active coins at approximately $77,200. With BTC price roughly 15% below this level, the market is characterized as being in a repair or bearish regime rather than a confirmed bullish recovery. Trading below this cost-basis metric suggests a significant portion of active supply is under pressure, which can hinder rallies as underwater investors may sell into rebounds. The report highlights ongoing stress among short-term holders, contributing to market sensitivity. While a defense of current support levels shows demand, a sustained reclaim of the $77,200 True Market Mean is viewed as a more constructive signal for a broader regime shift than a simple relief bounce. For a bullish recovery to be confirmed, the market needs sufficient demand to overcome this overhead cost pressure.

bitcoinistHá 54m

Bitcoin Remains Below Glassnode’s $77,200 True Market Mean

bitcoinistHá 54m

Introducing: Market Compass

Glassnode introduces Market Compass, a dashboard providing a unified view of Bitcoin market conditions. It consolidates thousands of on-chain and market metrics into seven "lenses." Four forward-looking lenses (Macro, Capital Flows, Investor Behavior, On-Chain Fundamentals) feed a headline composite score from 0 (Risk-Off) to 100 (Risk-On). Three standalone lenses (Cycle Position, Derivatives, Cross-Asset Rotation) describe the current market structure. In the current reading, the headline score is 14/100 (Risk-Off), indicating a defensive regime. The Macro lens is the weakest at 23, constrained by a strong US Dollar (DXY) trading above its 200-day average. While the other forward-looking lenses show moderate improvement from recent lows, the overall picture suggests bottom-fishing within an unturned market cycle. Key observations include stablecoin supply shrinking (reduced buying power), long-term holders absorbing supply, tepid on-chain demand, and a derivatives market coiled for a potential move. The tool is designed as a contextual map, not a direct trading signal, synthesizing complex data into a single coherent read.

insights.glassnodeHá 6h

insights.glassnodeHá 6h

NVIDIA CPU Advances, China's RISC-V Responds: Semiconductor Deep Dive - Part Four

NVIDIA is set to launch its new Vera AI data center CPU in China as early as August, with high pricing. While this move offers a new option, it highlights China's continued dependence on foreign-controlled Arm architecture. In response, the Chinese semiconductor industry is increasingly turning to RISC-V as a strategic alternative for achieving high-performance computing autonomy. The article explores the concept of the "impossible triangle" in CPU development—balancing prosperity, control, and autonomy—and posits that RISC-V's open-source, modular nature offers a unique path to achieving all three. While RISC-V is already dominant in embedded systems, the focus is now shifting to data centers and AI workloads. China has become a global hotspot for RISC-V development, driven by AI-driven compute demand, supply chain concerns from export controls, cost benefits of open-source, and strong policy support. Multiple Chinese companies have reportedly crossed the key performance threshold of 15 SPECint per GHz, a benchmark for entering the high-performance CPU club. Progress extends beyond single-core benchmarks. Companies are developing complete computing subsystems, including commercial-grade coherent network-on-chip (NoC) technology and server processors with up to 40 cores that strictly adhere to the RVA23 standard to ensure software compatibility. Real-world applications are emerging in areas like video transcoding and edge AI. However, significant challenges remain. The RISC-V ecosystem faces fragmentation, immature toolchains and verification processes, and gaps in single-core performance and energy efficiency compared to mature x86 and Arm architectures. The formidable software moat, epitomized by NVIDIA's CUDA, is a long-term hurdle. In conclusion, while RISC-V cannot immediately replace offerings like NVIDIA's Vera, it represents a viable long-term path for China to develop a self-sufficient, high-performance CPU ecosystem. The journey is acknowledged to be long and arduous, requiring sustained effort to overcome technical and ecosystem challenges.

marsbitHá 7h

NVIDIA CPU Advances, China's RISC-V Responds: Semiconductor Deep Dive - Part Four

marsbitHá 7h

Trading

Spot

Futuros