史上金额最大Axie公链Ronin被盗案回顾会像PolyNetwork一样幸运吗？

吴说区块链Опубліковано о 2022-03-31Востаннє оновлено о 2022-03-31

Анотація

3月29日晚间，链游王者Axie背后的Ronin链被盗突然被曝出，金额超过6.1亿美金，成为按发生时金额计算、史上金额最大的盗币案。

北京时间3月29日晚间，链游王者Axie背后的Ronin链被盗突然被曝出，金额超过6.1亿美金，成为按发生时金额计算、史上金额最大的盗币案（此前金额最大的PolyNetwork已经全部返还，金额在6亿左右）。

事情发生在3月23日，但官方直到3月29日才发现，引发社区诟病。Ronin官方表示，被盗金额为173,600ETH和25.5MUSDC。在3月29日发现，在3月23日，SkyMavis的Ronin验证器节点和AxieDAO验证器节点遭到破坏，导致在两笔交易中从Ronin桥接了173,600个以太坊和2550万美元的USDC。攻击者使用被黑的私钥来伪造假提款。直到29日用户报告无法从桥中提取5kETH后才发现了这次攻击。

Ronin表示，SkyMavis的Ronin链目前由9个验证节点组成。为了识别存款事件或取款事件，需要九个验证者签名中的五个。攻击者设法控制了SkyMavis的四个Ronin验证器和一个由AxieDAO运行的第三方验证器。

慢雾表示：事情背景可追溯到去年11月，当时SkyMavis请求AxieDAO帮助分发免费交易。由于用户负载巨大，AxieDAO将SkyMavis列入白名单，允许SkyMavis代表其签署各种交易，该过程于12月停止。但是，对白名单的访问权限并未被撤销，这就导致一旦攻击者获得了SkyMavis系统的访问权限，就能够通过gas-freeRPC从AxieDAO验证器进行签名。SkyMavis的Ronin链目前由九个验证节点组成，其中至少需要五个签名来识别存款或取款事件。攻击者通过gas-freeRPC节点发现了一个后门，最终攻击者设法控制了五个私钥，其中包括SkyMavis的四个Ronin验证器和一个由AxieDAO运行的第三方验证器。

BlockSec分析，资金盗取成功后，攻击者立刻将被盗USDC转移到Uniswap和1inch以换取Ether。具体来说，被盗USDC经由两个中间地址0x6656、0xe708分别流入Uniswap和1inch，换取到的Ether沿原路返回到攻击者地址0x098B。至此，所有被盗资金被统一成Ether。然后攻击者自3月28日起开始陆续转移Ether。截至目前，约175,913ETH被盗资金停留在攻击者地址中尚未转移，约1,279ETH被盗资金仍在转移过程中。

攻击者共接收182,162.86ETH（其中直接盗取173,600ETH，盗取的USDC共换取8,562.86ETH）。

据慢雾MistTrack分析，黑客首先将6250ETH分散转移，并将1220ETH转移到FTX、1ETH转到Crypto.com、3750ETH转到Huobi。值得注意的是，黑客发起攻击资金来源是从Binance提币的1.0569ETH。但是慢雾表示，这并不意味着黑客愚蠢到不会洗币。这也是一种常见的简单粗暴的洗币手法，使用假KYC、代理IP、假设备信息等等。从慢雾目前获取到的特殊情报来看，黑客并不“傻”，还挺狡猾，但追回还是有希望的，时间上需要多久不确定。这也要看执法单位的决心。

安全鹭（Safeheron）建议：1、私钥最好通过安全多方计算（MPC）消除单点风险；2、私钥分片分散到多台硬件隔离的芯片里保护；3、大资金操作应有更多的策略审批保护，保证资金异动第一时间由主要负责人获悉并确认；4、被盗实际发生时间是3月23日，项目方应加强服务和资金监控。

Binance表示，在Ronin(RON)网络上发生安全漏洞之后，调查团队正在支持AxieInfinity团队跟踪与其网桥相关的交易，以识别黑客。Ronin(RON)网络上的所有存款和取款已于2022年3月29日暂停，潜在的黑客地址也已被封锁，并设有专门的监控团队来监视任何异常交易。此外还暂停了以太坊网络上的WrappedEther(WETH)提现，以及从WETH到ETH的转换功能。FTX、Huobi等也表示采取了行动。

据彭博社，AxieInfinity与Ronin背后的母公司、越南游戏工作室SkyMavis表示，它将赔偿在黑客从Ronin系统窃取约6亿美元后损失资金的在线参与者。“我们完全致力于尽快补偿我们的玩家。我们仍在研究解决方案，这是一个持续的讨论。"SkyMavis在Axie与Ronin的项目上收益颇丰，因此社区可能普遍预计将会类似Jump填补损失。

全世界的目光都聚焦在这个黑客的地址，“假如你盗取了6个亿的加密货币该如何清洗”，甚至成为了网上的热门讨论。Ronin会像PolyNetwork一样幸运追回吗？目前还很难说。PolyNetwork由于有许多行业大佬“深陷其中”，因此各方助力强大。相较之下Ronin与Axie虽然是近年来狂飙突进的游戏龙头，但加密行业的人脉、资源、经验显然是并不充足的。

此外，近期行业已经发生了许多起黑客事件，迅速追回者几乎没有。例如Wormhole被盗的12万枚ETH，金额一样十分巨大，Jump直接填补后仍未追回；近期发生的Cashio被盗5200万美金，黑客非常嚣张，表示将退还10万美金以下的账户，“目的只是从不需要的人那里拿钱，而不是从需要的人那里拿钱”。再往前多起中心化交易所的巨额盗币事件也未有追回的消息。唯一幸运的竟然是Bitfinex。今年2月9日，美国司法部突然宣布抓获2016年Bitfinex近12万个盗币案的两名相关人员，并回收94,000多个比特币。

从历史来看，PolyNetwork的幸运可能真的是偶然。如慢雾所说，需要追回需要看执法机关决心，尤其是美国执法机关的努力，加上大量行业安全机构的长期参与，甚至黑客自身出现漏洞。但大概率这将是一场漫长的追索。

参考文章

https://roninblockchain.substack.com/p/community-alert-ronin-validators?s=r

https://mp.weixin.qq.com/s/0U58Chw970X2GWcj2fvLPg

https://mp.weixin.qq.com/s/mc1a11xnd4Pu27kqKqX_9g

https://mp.weixin.qq.com/mp/appmsgalbum?__biz=MzI0ODgzMDE5MA==&action=getalbum&album_id=2000916758660022274#wechat_redirect

Пов'язані матеріали

Microsoft CEO Satya Nadella's Latest Warning: Betting Entirely on a Single AI Model Hands Over a Company's Lifeblood

Microsoft CEO Satya Nadella warns that companies relying solely on a single AI model could jeopardize their survival. He argues that over-dependence leads to "vendor lock-in," where businesses risk ceding control over their core data, memory, contextual history, and AI usage patterns. This dependence essentially outsources a company's critical thinking and operational know-how to an external provider. The deeper a company integrates with one AI system—feeding it prompts, internal data, and workflows—the more it reveals its unique business methods and competitive edge. This accumulated knowledge could become accessible to the AI supplier. Furthermore, switching providers becomes extremely costly and complex, as companies would need to rebuild their entire AI-augmented workflow, memory, and tool integrations from scratch. Nadella's solution is "decoupling." Companies should separate their proprietary data, memory, and control layer (or "harness") from the underlying AI models. By retaining metadata from every AI interaction, businesses can preserve their operational "brain" or institutional knowledge. This allows them to flexibly use different AI models (e.g., from OpenAI, Anthropic, Microsoft) for specific tasks without losing their accumulated expertise. The core idea: companies can rent the smartest models available, but they must keep their own "brain" and operational control firmly in-house.

marsbit26 хв тому

Microsoft CEO Satya Nadella's Latest Warning: Betting Entirely on a Single AI Model Hands Over a Company's Lifeblood

marsbit26 хв тому

KOSPI Index Halts Trading Due to Eighth Price Limit Up Circuit Breaker Trigger of 2026

The South Korean KOSPI index has triggered a market-wide trading halt for the eighth time in 2026, falling another 8% and losing over 28% in the past month. This latest plunge is driven by a severe sell-off in semiconductor and AI-related stocks. Key contributors include a sharp decline in shares of SK Hynix (down 50% from its June high) and heavyweights like Samsung, which comprises 50% of the index. The drop followed a sector-wide weakness triggered by the IPO of Changxin Memory Technology and falling US chip stocks like Nvidia (-4.4%). Analysts point to massive AI financing deals (like Nvidia's $250B support for OpenAI) raising debt cost concerns and questioning AI scalability viability. The article notes Bitcoin's correlation with AI stocks has weakened, but KOSPI's volatility could redirect some liquidity to crypto markets. Blockchain-based exchanges are exploring KOSPI-linked perpetual futures to allow speculation on further declines or a short squeeze, as traditional altcoin trading in South Korea diminishes amid the index's dramatic swings.

cryptonews.ru26 хв тому

KOSPI Index Halts Trading Due to Eighth Price Limit Up Circuit Breaker Trigger of 2026

cryptonews.ru26 хв тому

Miners Advised Not to Buy GPUs for AI and to Focus on Infrastructure

A founder at an energy investment forum advises bitcoin miners not to purchase GPUs for AI themselves, but to instead focus on infrastructure like power and data center space. Mike Alfred of Alpine Fox stated that while AI infrastructure demand is a long-term, 20-30 year trend, it presents a key choice for miners. The first, riskier model involves owning and operating GPUs, which requires financing expensive hardware that quickly becomes obsolete. The second, more conservative model is akin to real estate: providing colocation services where clients bring their own servers, and the miner sells space, power, cooling, and water. Alfred noted this model is easier to finance. Most existing bitcoin mining sites are difficult and expensive to convert for AI, as AI data centers require far higher construction costs, redundant fiber connections, backup power, complex cooling, and near 100% uptime. A hybrid model, where mining acts as a flexible load to use excess power during AI data center construction or from generation facilities, was discussed. However, participants concluded this is only viable with very cheap power; otherwise, developers are better off focusing solely on AI. Miners are increasingly being evaluated for their available power capacity and project portfolios rather than just bitcoin output. Panelists also warned of risks in the AI sector, predicting at least one major default or contract breach among AI tenants, lenders, or landlords before bitcoin's next halving in 2028.

cryptonews.ru35 хв тому

Miners Advised Not to Buy GPUs for AI and to Focus on Infrastructure

cryptonews.ru35 хв тому

Millisecond 'Pay-to-Cut': How Did Hyperliquid's Priority Fee Turn into a Multi-Million Dollar Business?

"Millisecond 'Paid Queue-Jumping': How Hyperliquid's Priority Fee Became a Multi-Million Dollar Annual Business" In traditional finance, high-frequency trading firms spend millions on infrastructure for millisecond advantages. Hyperliquid has translated this race onto the blockchain with its "Priority Fee" system, creating an open economic game for speed. This system auctions two types of priority: **Gossip Priority** for faster data feeds (via a Dutch auction every 3 minutes), and **Order Priority** for front-of-queue trade execution (users bid a fee for lower latency). This converts a hardware race into a transparent, market-priced mechanism. Since launch, this feature has generated over $5M in protocol revenue. Projected annualized buybacks from this income exceed $30M, accounting for ~7% of total protocol revenue. The demand stems from large traders and market makers on Hyperliquid, for whom milliseconds can mean the difference between profit/loss or avoiding liquidation. Market makers pay these fees as "protection" to ensure their orders execute first, which in turn improves liquidity for all users. Crucially, Hyperliquid internalizes Maximum Extractable Value (MEV) that typically leaks to external validators or searchers, creating a new revenue stream beyond trading fees. The mechanism also strengthens HYPE's tokenomics. While 97% of trading fees fund secondary market buybacks (via the Assistance Fund), Priority Fees are **directly burned**, adding a second deflationary engine. Furthermore, fees for order priority are deducted from users' undelegated HYPE balances, encouraging large traders to hold and lock up tokens, reducing circulating supply. However, a key challenge remains: balancing the speed needs of institutional players with fair market access for retail users, as those who cannot pay high fees may suffer worse slippage during volatility. In summary, Hyperliquid's Priority Fee is a novel model that monetizes latency, captures MEV for the protocol, and enhances its native token's value through burning and lock-ups.

marsbit40 хв тому

Millisecond 'Pay-to-Cut': How Did Hyperliquid's Priority Fee Turn into a Multi-Million Dollar Business?

marsbit40 хв тому

Jito Seizes User Traffic with JTX, Why Is It Still Undervalued by the Market?

Jito, a Solana infrastructure provider, has launched a new product called JTX, which is shifting its business model from being a price-taker on Solana block space to becoming a price-setter for user transaction flow. Despite this strategic shift aimed at capturing and monetizing user traffic, the market continues to undervalue its native token, JTO. Analysts present a valuation case for JTO, arguing the market still prices it as backend infrastructure. Their base case scenario assumes JTX captures 15% of Solana DEX volume by Q2 2027, generating significant annualized revenue. Applying a conservative 30x P/S multiple to this revenue implies a JTO price of $1.18, representing ~57% upside from current levels (~$0.75). A probability-weighted target, including bullish (40% probability, 25% market share) and bearish (10% probability, 5% share) scenarios, points to a target of $2.75, suggesting ~267% potential upside. The thesis hinges on JTX's early positive performance data and its potential to benefit from the expected growth of on-chain trading, particularly from tokenized stocks and real-world assets. Furthermore, an estimated 80% of JTX's net revenue is slated for JTO buybacks, creating a potential value-accrual flywheel. The report concludes that Jito's transformation via JTX is not yet reflected in its valuation.

marsbit53 хв тому

Jito Seizes User Traffic with JTX, Why Is It Still Undervalued by the Market?

marsbit53 хв тому

Торгівля

Спот
活动图片