Blast协议MonoSwap宣布黑客攻击,并链接到攻击者的网站

币界网2024-07-24 tarihinde yayınlandı2024-07-24 tarihinde güncellendi

币界网报道:

MonoSwap,自称“Blast原生流动性空间”,通过其X账户宣布已被黑客攻击。

宣布黑客攻击的帖子详细介绍了MonoSwap的一名开发人员如何“安装了一个钓鱼应用程序,与假装是VC的骗子进行通话。攻击者将僵尸网络安装到他的办公电脑中,该电脑可以访问所有与MonoSwab相关的钱包和合同。”

它还指出,“黑客随后撤回了大部分质押的流动性头寸,对协议造成了损害。”

最初的帖子中包含了一个指向黑客网站的链接,但在Protos联系他问:“你认为在你的公告帖子中提供一个指向攻击者网站的链接是明智的吗?”之后,这个链接被删除了

阅读更多:基于Blast L2的借贷平台犯下代价高昂的错误,清算用户2600万美元

MonoSwap的文档中有一个标有“安全措施”的页面,该页面声称“MonoSwab精心制作的智能合约是由经验丰富的专业人士开发的,他们对行业有深入的了解。我们通过整合一套强大的功能和安全措施,优先考虑您的投资的安全性和优化性。”

此外,它还有一个标有“审计”的页面,乐观地宣称“即将发布”,尽管该页面还说“上次更新是在6个月前”

该协议还有其他不成熟之处,包括将其包装的代币xMONO描述为治理代币,尽管据Protos所知,目前还没有投票机制将这些治理代币用于治理。

Protos已联系MonoSwap,以澄清协议审计的状态,为什么一名高管可以访问其计算机上的所有这些关键任务资源,以及治理令牌的用途。截至发稿,我们尚未收到回复。

DefiLama的数据显示,该协议的“总价值锁定”从大约150万美元下降到今天的20万美元。

有消息吗?给我们发电子邮件或ProtonMail。如需了解更多信息,请在X、Instagram、Bluesky和谷歌新闻上关注我们,或订阅我们的YouTube频道。

Trend Kriptolar

İlgili Okumalar

a16z: From Companies to DAOs, DUNA May Become the Next Generation Organizational Form

This article, "From Companies to DAOs: How DUNA Could Become the Next Organizational Form," traces the 500-year evolution of business collaboration. It begins with medieval structures like the *commenda* and Florentine *compagnia*, which exposed partners to personal risk. The modern corporation, exemplified by the Dutch East India Company (VOC), was a revolutionary leap, enabling large-scale, capital-intensive ventures by offering limited liability and reducing coordination costs. However, corporations introduced new challenges like principal-agent problems and bureaucratic overhead. The piece argues that software and internet-native protocols are now reducing these traditional overheads. Decentralized Autonomous Organizations (DAOs) emerged as a new model for coordination without centralized management. Yet, DAOs face a significant legal vacuum: they lack legal recognition, leaving members exposed to unlimited personal liability, and their tokens are vulnerable to being classified as securities under unclear regulations (e.g., the Howey Test). This has forced projects into suboptimal workarounds like offshore foundations. The article identifies the Decentralized Unincorporated Nonprofit Association (DUNA) as a potential solution. Recently legalized in states like Wyoming, the DUNA provides a legal wrapper for decentralized networks. It grants key protections—legal personality, limited liability, and perpetual existence—to a group without imposing a traditional hierarchical management structure. This allows token-holder communities to govern, hold assets, and contract as a single legal entity, aligning with their decentralized nature. While DUNA doesn't solve all governance challenges or magically resolve securities law questions, it represents a crucial step. It fills the legal recognition gap, offering a native legal form for internet-scale, decentralized collaboration and extending the separation of personal risk from organizational venture into a new domain.

marsbit42 dk önce

a16z: From Companies to DAOs, DUNA May Become the Next Generation Organizational Form

marsbit42 dk önce

2026 Mid-Year Report On-Chain RWA: Tokenized Stock Market Cap Doubles in a Year, But 90% of Rights Are Hollow Shells

The 2026 Mid-Year Report on On-Chain RWA highlights a significant growth in tokenized stock market capitalization, which nearly doubled from $951 million in March to $1.89 billion by July. However, the report reveals a fundamental contradiction in this "layer 2.5" ecosystem: products with the strongest legal foundation (like regulated U.S. infrastructure) lack liquidity and distribution, while freely tradable offshored wrapper products often lack substantive ownership rights. The increase is driven largely by a few products (SECZ, FGRS, STRCx) and platforms (Ondo, xStocks, Securitize collectively hold over 85% share). While distributed value across networks like Ethereum, Solana, and BNB Chain has grown, the market remains fragmented. Products referencing the same underlying asset (e.g., Apple stock) are distinct legal liabilities with different intermediaries and jurisdictional rules, offering varying degrees of legal claim. The report cautions that headline numbers are misleading, as they reflect changes in distributed token value—driven by issuance, conversions, and price movements—not pure investor inflows. True "canonical shares" with legal ownership, wide wallet distribution, institutional liquidity, and independent on-chain price discovery do not yet exist at scale. Tokenized treasuries show stronger product-market fit, and ETFs may be easier to scale than single stocks. The core takeaway is a trade-off: legal certainty versus liquidity and composability.

marsbit1 saat önce

2026 Mid-Year Report On-Chain RWA: Tokenized Stock Market Cap Doubles in a Year, But 90% of Rights Are Hollow Shells

marsbit1 saat önce

Coldcard Hardware Wallet Hacked: 594 Bitcoin Withdrawn in 25 Minutes

The Coldcard hardware wallet has been compromised, with hackers stealing approximately 594.5 Bitcoin (~$40 million) from 500 addresses in just 25 minutes. The root cause was a critical software bug, undetected for five years, which disabled the device's secure chip for generating true random numbers. This led to the creation of private keys based on predictable data like the processor's serial number, drastically reducing cryptographic security. The attackers exploited this offline by brute-forcing possible seed phrases, finding active addresses on the public ledger, and signing transactions. Initially, Coinkite (Coldcard's maker) claimed only older models were at risk but later admitted all devices running the compromised firmware were vulnerable. CEO Rodolphe Novak (NVK) apologized but ruled out financial compensation for affected users. To secure funds, owners must urgently update their firmware to specific safe versions, generate a completely new seed phrase on the updated device, and transfer all assets to new addresses created with that new seed. While a BIP-39 passphrase can help, it does not replace this migration process. Other Coinkite products like TAPSIGNER were not affected. This incident underscores that even specialized hardware requires rigorous, independent code audits, especially for cryptographic functions. It parallels past failures, like a 2006 OpenSSL bug in Debian, and raises questions about whether automated code analysis can ever fully replace human scrutiny in critical security areas.

cryptonews.ru3 saat önce

Coldcard Hardware Wallet Hacked: 594 Bitcoin Withdrawn in 25 Minutes

cryptonews.ru3 saat önce

İşlemler

Spot

Popüler Makaleler

BLAST Nasıl Satın Alınır

HTX.com’a hoş geldiniz! Blast (BLAST) satın alma işlemlerini basit ve kullanışlı bir hâle getirdik. Adım adım açıkladığımız rehberimizi takip ederek kripto yolculuğunuza başlayın. 1. Adım: HTX Hesabınızı OluşturunHTX'te ücretsiz bir hesap açmak için e-posta adresinizi veya telefon numaranızı kullanın. Sorunsuzca kaydolun ve tüm özelliklerin kilidini açın. Hesabımı Aç2. Adım: Kripto Satın Al Bölümüne Gidin ve Ödeme Yönteminizi SeçinKredi/Banka Kartı: Visa veya Mastercard'ınızı kullanarak anında Blast (BLAST) satın alın.Bakiye: Sorunsuz bir şekilde işlem yapmak için HTX hesap bakiyenizdeki fonları kullanın.Üçüncü Taraflar: Kullanımı kolaylaştırmak için Google Pay ve Apple Pay gibi popüler ödeme yöntemlerini ekledik.P2P: HTX'teki diğer kullanıcılarla doğrudan işlem yapın.Borsa Dışı (OTC): Yatırımcılar için kişiye özel hizmetler ve rekabetçi döviz kurları sunuyoruz.3. Adım: Blast (BLAST) Varlıklarınızı SaklayınBlast (BLAST) satın aldıktan sonra HTX hesabınızda saklayın. Alternatif olarak, blok zinciri transferi yoluyla başka bir yere gönderebilir veya diğer kripto para birimlerini takas etmek için kullanabilirsiniz.4. Adım: Blast (BLAST) Varlıklarınızla İşlem YapınHTX'in spot piyasasında Blast (BLAST) ile kolayca işlemler yapın.Hesabınıza erişin, işlem çiftinizi seçin, işlemlerinizi gerçekleştirin ve gerçek zamanlı olarak izleyin. Hem yeni başlayanlar hem de deneyimli yatırımcılar için kullanıcı dostu bir deneyim sunuyoruz.

139 Toplam GörüntülenmeYayınlanma 2024.12.11Güncellenme 2026.06.02

BLAST Nasıl Satın Alınır

Tartışmalar

HTX Topluluğuna hoş geldiniz. Burada, en son platform gelişmeleri hakkında bilgi sahibi olabilir ve profesyonel piyasa görüşlerine erişebilirsiniz. Kullanıcıların BLAST (BLAST) fiyatı hakkındaki görüşleri aşağıda sunulmaktadır.

活动图片