2025 年 1 月 Web3 安全事件盘点：总损失约 9,819 万美元

链捕手2025-02-05 tarihinde yayınlandı2025-02-05 tarihinde güncellendi

作者：慢雾安全团队

 

概览

2025 年 1 月，Web3 安全事件总损失约 9,819 万美元。其中，据慢雾区块链被黑档案库 (https://hacked.slowmist.io) 统计，共发生 40 起被黑事件，导致损失约 8,794 万美元，有 147 万美元得到返还，事件原因涉及合约漏洞、账号被黑和私钥泄露等。此外，据 Web3 反诈骗平台 Scam Sniffer 统计，本月有 9,220 名钓鱼事件受害者，损失规模达 1,025 万美元。

(https://dune.com/scam-sniffer/january-scam-sniffer-2025-scam-report)

安全大事件

Phemex

2025 年 1 月 23 日，总部位于新加坡的加密货币交易所 Phemex 的热钱包被攻击，导致约 7 千万美元的损失。Phemex CEO Federico Variola 在 X 平台表示：「大家好，我们正在调查有关某个热钱包的报告，请放心，冷钱包依然安全，任何人都可以查验。我们会尽快带来更多更新。」

(https://x.com/MistTrack_io/status/1882412516518789500)

NoOnes

2025 年 1 月 1 日，P2P 交易平台 NoOnes 遭攻击，其热钱包在 Ethereum、Tron、Solana 和 BSC 上出现了数百笔可疑转出交易，损失约 720 万美元。首席执行官 Ray Youssef 解释说，此次事件的原因是其 Solana 桥遭利用。

(https://x.com/ray_noOnes/status/1882744360812306885)

AdsPower

2025 年 1 月 24 日，AdsPower 的安全团队发现了一起入侵事件，黑客散播了恶意代码导致部分第三方浏览器插件遭到篡改，超 470 万美金被盗，慢雾安全团队已介入分析。如果用户有使用 AdsPower，且在 1 月 21 日 18:00 至 1 月 24 日 18:00 (UTC+8) 安装过扩展钱包或手动更新过扩展钱包，那么用户 AdsPower 上的扩展钱包可能是带后门的版本（助记词 / 私钥存在被盗风险），请尽快转移相关钱包的资产。

(https://x.com/AdsPowerBrowser/status/1882983731419570220)

Moby

2025 年 1 月 8 日，攻击者控制了用于授权 Moby 核心合约升级的私钥，导致协议遭到破坏。这次攻击导致 sOLP 和 mOLP 流动性池中的 3.77 wBTC、207.76 wETH 和 1,500,351.5 USDC 曝露于风险之中。Moby 在 Seal911 团队的协助下已追回了约 147 万枚 USDC。

(https://medium.com/moby-trade/moby-post-mortem-report-growth-plan-504ad5b0dd35)

Orange Finance

2025 年 1 月 8 日，基于 Arbitrum 的流动性管理项目 Orange Finance 由于多签配置错误被利用，导致价值 83 万美元的资产被盗。攻击者获取了每个金库的所有权，修改了它们的实现，并提取了存入的资产以及过度授权的资金。总损失中约 94%（约 78 万美元）来源于存入资产，其余 6%（约 4.7 万美元）则是由于过度授权造成的。

(https://mirror.xyz/0x6FA2aF9a4d6fFe654361F713780963C10412e7c3/gN17YMrLhKKg9YT9a391U74pWr9IhqBUDWUqDyDamjE)

特征分析及安全建议

近期账号被盗事件频发，据慢雾区块链被黑档案库统计，一月发生了 21 起账号被盗事件，约占总事件数的一半，其中政治人物或政治内容相关的账号被盗情况尤为突出。黑客或恶意行为者使用社交媒体推广 Meme 币，利用用户们的 FOMO 情绪吸引资金，然后卷款跑路，例如，X 账号 @TrumpDailyPosts 发布了 4 条推广 Meme 币的推文，在几分钟内迅速删除，卷走了约 125 万美元。因此，建议用户提高警惕，购买代币前核实信息来源，不要轻信社交媒体上的突然公告，尤其是涉及政治人物、知名机构或明星的 Meme 币，避免落入骗局。

此外，慢雾安全团队注意到，近期收到的众多受害者的求助信息均与 Telegram 上的「假 Safeguard」骗局有关，相关作恶手法和应对措施见新型手法｜Telegram 假 Safeguard 骗局。

İlgili Okumalar

Kraken Launches CFTC-Regulated Perpetual Futures For US Pro Traders

Kraken has launched U.S. CFTC-regulated perpetual futures contracts for eligible institutional and professional clients, making a core crypto derivatives product available on a compliant domestic platform. The contracts, for assets including BTC, ETH, and SOL, are offered via Kraken Pro with clearing through a registered Futures Commission Merchant. This move brings the popular perpetual futures format, which allows leveraged trading without an expiry date, into the stricter U.S. regulatory framework. It provides professional traders a potential alternative to offshore platforms, balancing regulatory comfort with access to key products. However, the launch is explicitly not for retail investors. Its success depends on whether Kraken can build sufficient liquidity to compete with dominant offshore venues on metrics like spreads and execution quality. While symbolically significant for U.S. market maturity, its practical impact hinges on attracting meaningful trading activity onshore.

bitcoinist10 dk önce

Kraken Launches CFTC-Regulated Perpetual Futures For US Pro Traders

bitcoinist10 dk önce

Unveiling the Whales of the World Cup Prediction Market: Smart Money Stumbles on the Pitch, 'Buy No' Outperforms 'Buy Yes'

**Title: Unveiling the Whales of the World Cup Prediction Market: "Smart Money" Stumbles on the Pitch as "Buying No" Outperforms "Buying Yes"** An analysis of pre-match trades over $5,000 on Polymarket for 20 completed group stage matches reveals a counterintuitive finding: large "smart money" bets were not consistently accurate. Aggregated pre-match buying volume was $89.55 million, with a weighted hit rate of only 48.5%. Holding these positions would have resulted in an estimated net loss of about $1.76 million (ROI -2.0%), challenging the notion that big money reliably predicts outcomes. The data highlights several key dynamics. Draws proved to be a major risk, significantly impacting bets on favored teams, as seen in Belgium-Egypt and Spain-Cape Verde. Markets were more efficient for clear mismatches (e.g., Germany's big win) but became prone to bias when favorites were overvalued. Notably, buying "No" shares (betting against a specific outcome) significantly outperformed buying "Yes," with hit rates of 62.4% vs. 37.5%. This suggests the market often overprices popular narratives, creating value in contrarian positions. Individual trades showed extreme volatility. One wallet (mintblade) earned an estimated $6.77 million by betting against Iran, while another (LEEEROYJENKINS) lost roughly $8.39 million on a Belgium win. The market favors high-risk, high-reward information trading rather than steady arbitrage. For sustained insight, wallets with consistent performance across multiple matches (e.g., swisstony) are more telling than one-off big bets. Ultimately, the Polymarket acts less as a crystal ball and more as a mirror, reflecting crowd bias and the inherent unpredictability of football. True "smart money" may lie not in predicting the future, but in identifying and exploiting market mispricings while respecting risk.

marsbit23 dk önce

Unveiling the Whales of the World Cup Prediction Market: Smart Money Stumbles on the Pitch, 'Buy No' Outperforms 'Buy Yes'

marsbit23 dk önce

Bezos' Third Startup Still Can't Avoid Musk

Jeff Bezos Returns as CEO for Third Venture, Still Can't Avoid Musk After stepping down as Amazon CEO in 2021, Jeff Bezos has returned to the front lines as co-CEO of Prometheus, an AI startup he founded. In a recent CNBC interview, Bezos described the experience as "Type 2 fun"—exhausting but ultimately rewarding. Founded less than a year ago, Prometheus has already raised over $18 billion in two funding rounds, achieving a staggering $41 billion valuation. Prometheus aims to develop a "General Engineer AI" to accelerate the entire "invention loop"—design, simulation, testing, and manufacturing—for complex physical products like jet engines, spacecraft, and medical devices. This positions the company at the intersection of Bezos's past experiences: Amazon's platform-building scale and Blue Origin's rigorous physical engineering. This marks Bezos's third major venture, following Amazon and Blue Origin. His co-CEO is Vik Bajaj, bringing expertise from life sciences and hard tech. Bezos now dedicates most of his time to Prometheus, signaling his belief in its transformative potential. The move also comes as Bezos's space company, Blue Origin, faces challenges, including a recent test explosion delaying its New Glenn rocket. Meanwhile, Elon Musk's SpaceX achieved a record-breaking IPO, surpassing Amazon's market cap. While Musk focuses on AI for executing physical tasks (like Tesla's robots and SpaceX's engineering), Bezos is betting on AI to *invent* in the physical world. Prometheus enters a crowded industrial AI field with players like OpenAI, NVIDIA, and Tesla's Optimus. Its lofty valuation bets on the unproven but massive opportunity to become the foundational platform for engineering in the AI era—a "blue ocean" Bezos hopes to define before Musk does.

marsbit26 dk önce

Bezos' Third Startup Still Can't Avoid Musk

marsbit26 dk önce

Cursor's New 1.5T Model Abandons Kimi Foundation, $60 Billion Stock Swap for Cursor, Musk's First Move Targets Microsoft's GitHub

Cursor, a popular AI-powered coding tool, has been acquired by SpaceX in an all-stock deal valued at $60 billion. The announcement coincided with Cursor's unveiling of major new developments at the Compile conference: a new 1.5 trillion+ parameter AI model and a "GitHub for agents" platform called Origin. The upcoming model, trained from scratch on over 100,000 GPUs with 10-20x more computational power than before, marks a shift from Cursor's previous reliance on models like Kimi. Cursor's CEO, Michael Truell, emphasized the model will be a "generally intelligent" assistant, moving beyond just code generation to handle broader engineering tasks like planning, testing, and UI interaction. Simultaneously, Cursor introduced Origin, a "Git-native" code hosting platform designed for AI agents that perform thousands of operations daily, featuring automated conflict resolution for large-scale, AI-generated code changes. The acquisition by SpaceX provides Cursor with significant computational resources. Analysts suggest this combination—Cursor's expertise in reinforcement learning and SpaceX's computing power—could position them strongly in the AI race, potentially challenging established players like GitHub, Claude Code, and Codex.

marsbit29 dk önce

Cursor's New 1.5T Model Abandons Kimi Foundation, $60 Billion Stock Swap for Cursor, Musk's First Move Targets Microsoft's GitHub

marsbit29 dk önce

Won't US Stocks Ever Fall Again? The 'Great Melt-up' Trap in the Era of High Debt

The article analyzes a popular theory circulating online that the U.S. stock market may be mathematically incapable of a true, sustained decline due to the country's massive and growing national debt. The argument suggests that the government's only path to managing this debt is through inflation and money printing, which would nominally lift asset prices like stocks, creating a perpetual "melt-up." The author places this idea within the historical context of market melt-ups, such as the dot-com bubble and Japan's asset bubble, where prices detach from fundamentals driven by momentum and FOMO. While acknowledging that a high-debt environment creates incentives for inflation, which is generally favorable for assets over cash, the article refutes key claims of the online theory. It clarifies that interest payments are not about to exceed GDP, that printing money is not the only option for the government, and that stocks do not reliably rise in lockstep with hyperinflation, citing historical examples from Germany, Zimbabwe, and Venezuela. The more probable outcome, according to the author, is a prolonged period of financial repression—moderate inflation above interest rates that slowly erodes debt and cash purchasing power, leading to nominally higher asset prices but potentially lower real returns. The core warning is that while long-term market trends may be upward, this does not eliminate the risk of significant interim crashes (30%, 40%, or more) or guarantee real wealth creation during inflationary times. The conclusion advises against betting one's entire financial future on a smooth, perpetually rising market narrative. Instead, it recommends a disciplined, diversified strategy involving productive assets (stocks, real estate, some gold, short-term bonds) and an adequate cash buffer to avoid forced selling during downturns. The key takeaway is to avoid extreme concentration in expensive assets and leverage, and not to base investment decisions on the hope that every market dip will inevitably be rescued.

marsbit46 dk önce

Won't US Stocks Ever Fall Again? The 'Great Melt-up' Trap in the Era of High Debt

marsbit46 dk önce

İşlemler

Spot
Futures
活动图片