Взломы Defi остаются серьезной угрозой, несмотря на 50%-ное снижение в 2023 году: Хэлборн

cryptonews.ruОпубліковано о 2024-03-12Востаннє оновлено о 2024-08-12

Общий объем краж в 2023 году снизился на 50% по сравнению с предыдущим годом.
Число хакерских атак вне блокчейна, включая кражу закрытых ключей, растет: в 2023 году на их долю пришлось 57,5% от общего объема краж.
Хэлборн предупреждает, что 21% взломанных протоколов использовали кошельки с несколькими подписями, и что большинство взломов произошло с протоколами, которые не прошли аудит.

По данным отчета компании Halborn, занимающейся безопасностью блокчейнов, взломы децентрализованных Финансы (DeFi) остаются серьезной угрозой для отрасли, несмотря на снижение объема краж в 2023 году.

В отчете обобщены 100 крупнейших взломов DeFi в период с 2016 по 2023 год, общая сумма которых составляет 7,4 миллиарда долларов, при этом большинство атак произошло на Ethereum, Binance Smart Chain и Polygon.

Хотя наиболее распространены ончейн-хаки, включая эксплуатацию смарт-контрактов, манипулирование ценами и атаки на управление, офчейн-атаки, такие как кража закрытых ключей, составляют 29% от общего числа атак и 34,6% от общего числа украденных средств. В 2023 году офчейн-атаки составили 56,5% от общего числа атак и 57,5% от украденной суммы.

В отчете также отмечается, что только 21% взломанных протоколов использовали кошельки с несколькими подписями — метод безопасности, требующий одновременного одобрения транзакции несколькими людьми.

Хэлборн также предупреждает, что большинство атак на блокчейне совершалось на протоколах, которые не проходили аудит, и что отсутствие в протоколе некорректной проверки или подтверждения ввода является основной причиной потерь с точки зрения эксплуатации смарт-контрактов.

Халборн добавляет, что межцепочечные мосты также остаются ключевым вектором атак для злоумышленников, и что протоколы должны «тщательно проверять код» перед использованием межцепочечного моста.

На прошлой неделе был взломан мост Ronin Bridge, что привело к потере 12 миллионов долларов. Это произошло после того, как два года назад тот же протокол был взломан на сумму 625 миллионов долларов .

Ранее в этом году отчет Immunefi показал, что взломы DeFi привели к потере 473 миллионов долларов в первой половине 2024 года.

Пов'язані матеріали

When US Giants Collectively "Defect" to Chinese AI Models

When Silicon Valley Giants Turn to Chinese AI Models to Cut Costs A surprising trend is emerging: major U.S. tech companies are significantly reducing AI costs by switching to Chinese models. Coinbase, the largest U.S. cryptocurrency exchange, reportedly halved its AI spending after migrating to China's GLM-5.2 and Kimi 2.7 models, despite increasing usage. They achieved this through a sophisticated three-part strategy: implementing an automatic routing system to select the most cost-effective model per task, boosting cache hit rates from 5% to 60% to reuse computations, and employing "context engineering" to provide AI with more precise, less cluttered information. They are not alone. AI startup Lindy switched from Claude to DeepSeek, saving millions, while Snowflake's tests found GLM-5.2 solved 66% of coding tasks compared to Claude Opus's 67%—but at a fraction of the cost (output pricing is 5-7 times lower). While the top Western models may offer slightly better stability, the massive price differential is leading many businesses to reconsider their value proposition. This shift signals a deeper change in the AI industry, moving beyond pure performance benchmarks to a fierce cost competition. As pressure mounts, even OpenAI and Anthropic have begun slashing prices. For users, this means more choices, lower costs, and a crucial lesson: using multiple models based on task complexity, optimizing with caching, and keeping contexts lean are now key to leveraging AI efficiently and affordably.

marsbit7 хв тому

When US Giants Collectively "Defect" to Chinese AI Models

marsbit7 хв тому

BIS Report Compliance Watch: The Real Risks of Stablecoins Are Not Just 'De-pegging'

BIS Report Compliance Observations: The real risks of stablecoins go beyond "depegging" The BIS report "Anchoring trust in money: innovation beyond stablecoins" argues that while stablecoins and tokenization offer efficiency gains, their primary risk lies in fitting into an identifiable, monitorable, accountable, and regulatable financial system. Money's trust stems not just from technology but from institutional arrangements: a common unit of account, guaranteed redemption at par, liquidity support, regulatory frameworks, and financial integrity requirements. Stablecoins, operating on permissionless blockchains with pseudo-anonymity and non-custodial wallets, create systemic compliance gaps: unclear customer identity, incomplete fund origins, unexplained transaction purposes, fragmented cross-chain paths, and ambiguous liability. On-chain transparency does not equal compliance transparency. Public addresses don't reveal identity or intent. While blockchain analytics aid law enforcement, they cannot replace routine, large-scale AML/CFT controls. Effective compliance requires a closed-loop process encompassing customer onboarding, transaction monitoring, investigation, reporting, and audit. Stablecoin risks are not confined to the blockchain; they re-enter the traditional financial system via on/off-ramps, exchanges, and payment institutions. This forces banks to monitor client accounts for activity linked to virtual assets. The future direction is not to prohibit innovation but to embed rules into the technology. Tokenized finance should integrate with the existing two-tier monetary system, embedding compliance—like customer identification, pre-transaction screening, and auditable data trails—directly into the transaction flow. For compliance professionals, the key takeaway is that any new financial instrument must answer core questions: Who identifies the customer? Who monitors transactions? Who handles exceptions? Who is liable? Compliance is not the antithesis of innovation but the essential infrastructure for its sustainable growth.

链捕手8 хв тому

BIS Report Compliance Watch: The Real Risks of Stablecoins Are Not Just 'De-pegging'

链捕手8 хв тому

When American Giants 'Defect' to Chinese AI Models

Summary: The trend of major U.S. technology firms adopting more cost-effective Chinese AI models is gaining momentum. A prime example is Coinbase, the largest U.S. cryptocurrency exchange, which reportedly halved its AI expenditure by switching to Chinese models GLM-5.2 and Kimi 2.7, while its usage volume increased. This was achieved through a sophisticated cost-saving system featuring intelligent model routing (selecting the most suitable model per task), dramatically improving cache hit rates from 5% to 60%, and implementing "Context Engineering" to streamline prompts. This shift is not isolated. Other companies like the AI startup Lindy and data cloud firm Snowflake are making similar moves, drawn by the significant price disparity. For instance, GLM-5.2 costs $1.40/$4.40 per million tokens (input/output), compared to $5/$25 for Claude Opus 4.7. While top Western models may offer slightly higher stability or speed in complex tasks, the performance gap is narrowing, making the price difference harder to justify for many enterprise use cases. The implications are significant for both businesses and individual users. It highlights the importance of a multi-model strategy based on task requirements, the value of caching and reusing outputs, and the effectiveness of providing concise context. Ultimately, this migration signals a potential reshaping of the AI industry's pricing model, moving competition from pure performance benchmarks to practical cost-effectiveness, with increased choice and downward price pressure benefiting end-users.

链捕手14 хв тому

When American Giants 'Defect' to Chinese AI Models

链捕手14 хв тому

Sui Testnet Update v1.74.1 Slashes Transaction Gas Costs Via Protocol Version 128

Sui blockchain developer Mysten Labs has deployed testnet update v1.74.1, introducing protocol version 128. The primary outcome of this upgrade is a significant reduction in transaction gas costs for users and developers operating on the testnet. These optimizations are designed to enhance network performance and scalability in preparation for a future mainnet deployment. It is crucial to note that these changes are currently confined to the testnet environment. The development provides a concrete, source-verified data point regarding ongoing protocol improvements. For market participants, this represents a confirmed technical advancement to consider, though it should be weighed alongside broader market factors and does not in itself guarantee specific price movements. The story highlights a focus on foundational development amid typical market volatility.

bitcoinist16 хв тому

Sui Testnet Update v1.74.1 Slashes Transaction Gas Costs Via Protocol Version 128

bitcoinist16 хв тому

Bitcoin eyes macro jump to $70K after drop below $60k – What’s next for BTC?

Bitcoin's price recently dipped below $60,000 but has since recovered to around $61,540. While technical indicators like the RSI and MACD show some bullish signs, they are not strongly convincing. On-chain data reveals a market reset, with asset managers' net long exposure at its lowest since U.S. spot Bitcoin ETF launches, though they remain net long. Leveraged funds have significantly reduced net short positions, and open interest has fallen sharply, indicating leverage is being unwound. Long-term holders are buying at lower prices, providing support. However, Bitcoin remains below its 30-day moving average, suggesting the overall trend is not yet fully bullish. Large transfers to exchanges like Coinbase Prime have occurred, potentially indicating future selling pressure. Analysts warn that downside risk remains as Bitcoin has not reached severely oversold levels typical of cycle bottoms. The market's next major move may depend on institutional activity.

ambcrypto20 хв тому

Bitcoin eyes macro jump to $70K after drop below $60k – What’s next for BTC?

ambcrypto20 хв тому

Торгівля

Спот