Ущерб от взлома фронтенда DEX Aerodrome в сети Base составил $700 000

cryptonews.ru2025-04-23 tarihinde yayınlandı2025-11-24 tarihinde güncellendi

Команда децентрализованной биржи (DEX) Aerodrome в L2 Base выпустила отчет по итогам взлома фронтенда 21 ноября.

Атаку удалось полностью нейтрализовать менее чем за четыре часа благодаря поддержке пяти фирм, специализирующихся на безопасности.

Благодаря этому потери ограничились $700 000 — столько успели лишиться девять пользователей, которые подключились и подписали транзакции на скомпрометированных aerodrome.finance и velodrome.finance, пока они были активны.

В течение двух минут после первой известной вредоносной операции основные кошельки вроде Metamask и Coinbase Wallet стали выводить предупреждения.

Корнем стала внутренняя брешь в безопасности NameSilo — регистратора и партнера по DNS основного провайдера 3DNS. Последний был выбран после консультаций с лидерами отрасли.

Источник: Aerodrome.

По теме: эксперты уверены, что хакер Balancer готовил операцию несколько месяцев

Разбор полетов

По итогам анализа инцидента специалисты пришли к выводу, что злоумышленникам удалось обойти контроль мультиподписей.

Хакеры смогли удалить DNSSEC с обоих доменов. Сотрудник NameSilo изменил или способствовал изменению записей aerodrome.finance и velodrome.finance.

После атаки 3DNS и NameSilo проявили сотрудничество и прозрачность, продолжая расследовать основные причины и пересматривать свои методы работы для предотвращения будущих проблем.

Команда приняла решение не возвращать централизованные домены в ту же инфраструктуру. Новые домены запустят на следующей неделе после консультаций со специалистами по безопасности и руководителями некоторых ведущих корпоративных регистраторов.

По мере миграции разработчики призвали использовать децентрализованные домены, которые по-прежнему остаются безопасными и работоспособными.

Aero Foundations и Velo Foundations работают над планом предоставления юзерам грантов, пропорциональных потерям.

По теме: децентрализация, безопасность, контроль — три кита новой финансовой культуры

İlgili Okumalar

Optimism Moves 546.9M OP From Airdrop Reserve To Strategic Fund

Optimism governance has approved reallocating 546.9 million OP tokens (worth approximately $49 million) from user airdrop reserves into a Strategic Ecosystem Fund managed by the Optimism Foundation. This major decision shifts capital away from potential future broad user airdrops and toward more targeted strategic partnerships and ecosystem growth incentives. The move signals a shift in incentive philosophy, reflecting broader market skepticism about the long-term efficacy of airdrops, which can attract short-term farming. Instead, the Foundation will use the fund to support partnerships, integrations, developer incentives, and other strategic programs aimed at driving measurable ecosystem growth and competitiveness. Importantly, this does not mean the end of all user rewards, as other incentive mechanisms remain possible. The key test will be the fund's execution—its allocation transparency and ability to deliver results in usage, development, and adoption. This reallocation represents a trend where mature crypto networks move toward more professional, strategically deployed incentive programs.

bitcoinist9 dk önce

Optimism Moves 546.9M OP From Airdrop Reserve To Strategic Fund

bitcoinist9 dk önce

Billionaire Ray Dalio: "US Debt Is Nearing the Point of No Return, Turn to Gold and Bitcoin"

Ray Dalio, the billionaire founder of Bridgewater Associates, warns that the rapid growth of global debt poses a significant risk to investors. He argues that the U.S. national debt cycle has entered an advanced stage, with increasing bond supply outpacing investor demand, putting pressure on interest rates and currencies. As U.S. federal debt approaches $32 trillion with $1 trillion in annual interest payments, Dalio predicts it could surge to $55-$60 trillion within a decade if trends continue. Faced with this unsustainable path, Dalio suggests governments have two tough choices: keep rates high to attract bond buyers (stifling growth) or print more money (debasing currencies). In such a risky environment, he advises investors to diversify across asset classes and countries, focusing on economies with strong income structures and healthy balance sheets. His specific recommendations include reducing exposure to bonds while increasing allocations to gold and, to a limited extent, Bitcoin. Dalio proposes that allocating roughly 10-15% of a portfolio to assets like gold and a small portion to Bitcoin could help mitigate overall risk and potentially enhance returns, though he remains cautious regarding Bitcoin's allocation size.

cryptonews.ru49 dk önce

Billionaire Ray Dalio: "US Debt Is Nearing the Point of No Return, Turn to Gold and Bitcoin"

cryptonews.ru49 dk önce

Standard Chartered: Bitcoin Could Reach $126,000 and Hit a New All-Time High by Year-End

Standard Chartered has revised its year-end Bitcoin price target upward, suggesting it could reach a new all-time high of $126,000. The bank's head of digital assets research, Geoff Kendrick, noted that the current rally is driven by short liquidations and a recovery in spot Bitcoin ETF inflows. He stated that low open interest leaves room for new investors, reducing the risk of a sharp sell-off from an overheated market. This marks a shift from the bank's earlier, more conservative forecast. In February, Standard Chartered lowered its 2024 Bitcoin target from $150,000 to $100,000, anticipating a deep correction first. However, Bitcoin's steady climb has prompted Kendrick to consider the possibility that his initial $100,000 target may be too low. Other analysts are also signaling a potential market bottom. Swan Bitcoin's Cory Klippsten expects a bottom to form in October, while 10x Research's Markus Thielen suggests closing August above $63,000 could confirm the end of the bear market. Bitcoin recently rose above $79,000, gaining 25% in a week. The analysis cautions that macroeconomic factors remain crucial. Past rallies have been vulnerable to inflation data and Federal Reserve rate decisions, with sharp pullbacks following positive news cycles. The sustainability of any surge toward $126,000 will depend on upcoming CPI reports and monetary policy.

cryptonews.ru1 saat önce

Standard Chartered: Bitcoin Could Reach $126,000 and Hit a New All-Time High by Year-End

cryptonews.ru1 saat önce

Arbitrum Activates ArbOS 61 Elara With Optional Orbit Compliance Filters

Arbitrum has activated the ArbOS 61 "Elara" upgrade, introducing new tooling for its Orbit chains. The key addition is an optional protocol-level compliance filtering feature, designed for private or enterprise Orbit deployments to meet regulatory needs, and explicitly not for the public Arbitrum One or Nova networks. The upgrade also expands the Stylus contract size limit from 24 KB to 96 KB, providing developers greater flexibility for building more complex applications in languages like Rust and C++. This move underscores Arbitrum's evolution beyond a single L2 into a broader infrastructure stack, balancing enterprise customization with the open ethos of its public ecosystems.

bitcoinist1 saat önce

Arbitrum Activates ArbOS 61 Elara With Optional Orbit Compliance Filters

bitcoinist1 saat önce

Galaxy Research: Can SEC's New Regulations Usher in a New Era for Token Financing?

**SEC Proposes New Framework for Token Offerings, Potentially Unlocking Legal Paths for U.S. Crypto Fundraising** On August 18, the U.S. Securities and Exchange Commission (SEC) proposed new rules, dubbed "Reg Crypto," specifically tailored for crypto asset offerings. This framework marks a departure from applying traditional securities rules designed for stocks to tokens. It creates a potential legal pathway for token sales to the U.S. public, including non-accredited investors, without full registration. The proposed rules apply to crypto assets that are not themselves securities but were sold as part of an investment contract where the issuer promised to build a product, network, or ecosystem. It establishes a four-phase lifecycle: Raise, Disclose, Build, and Exit. The "Raise" phase includes two new fundraising exemptions: a startup exemption allowing up to $5 million over four years and a larger, Regulation A-based exemption for up to $20 million or $75 million over 12 months. The "Disclose" phase requires specific token-related disclosures like supply schedules, governance, and development progress. After the issuer completes its promised development work and files a transition report, the "Exit" phase allows the associated investment contract to terminate, even if the token continues to trade. The analysis highlights that the framework's most immediate impact may be providing a formal "exit" path for existing tokens with unclear legal status, rather than immediately sparking a new wave of U.S.-based token offerings. It offers advantages over traditional private placements by allowing public sales and immediate token transferability but imposes ongoing disclosure and reporting obligations. A key hurdle is that the larger exemption requires a substantial U.S. operational presence, which may deter projects with offshore structures. Overall, the proposal is seen as a constructive step toward regulatory clarity, acknowledging that token offerings differ from equity offerings and require tailored investor disclosures. However, it remains a proposal subject to a 60-day public comment period, and its long-term stability may ultimately depend on congressional action.

marsbit3 saat önce

Galaxy Research: Can SEC's New Regulations Usher in a New Era for Token Financing?

marsbit3 saat önce

İşlemler

Spot