ZachXBT 探索 536 万美元钱包耗尽攻击
链上研究人员 ZachXBT 注意到另一起钱包耗尽攻击，涉及数十个地址。这些看似随机的运输都与 Last Pass 数据泄露有关，可能会暴露多个钱包。
ZachXBT 报告称，从包含Bitcoin和Ethereum生态系统资产的个人钱包中总共被盗走536 万美元。所有看似随机的地址都有一个共同点——使用 Last Pass 作为密码存储和保护。 2022 年数据泄露后，钱包列表被泄露。
ZachXBT 还将攻击者dent为一个有凝聚力的实体，即“最后通行证威胁行为者”。攻击者采用了类似的方法来耗尽钱包，然后立即通过Ethereum和Bitcoin进行即时兑换。这次攻击影响了多个代币，但黑客正试图简化他们的持有量。
Last Pass 受害者面临新一轮钱包攻击
显然，一些钱包所有者还在该服务上存储了私钥，从而泄露了对钱包的直接访问权限。实际的攻击发生在数据泄漏很久之后，可能有更多的钱包可能被暴露，但尚未耗尽。
最近一批被耗尽的钱包包括具有 ENS 名称的加密货币影响者，以及活跃的DEX和DeFi用户。尽管经验丰富，但暴露的地址导致了全部损失。自动从智能trac接收资金或奖励的钱包可能尤其面临风险。
在其中一个案例中， 收到的资金来自 OpenSea 用户，可能来自 NFT 的销售。在这种情况下，接收钱包可能是自动化的，并且已经链接到 NFT 市场。此后不久，钱包就被掏空，资金直接用于匿名交换。
迄今为止，共有 40 多个地址被耗尽。在某些情况下，这些地址显示出受到监视的证据，因为资金耗尽是在最近存入资金后发生的。一些钱包从交易所接收资金用于存储或作为中间持有，并在传入交易后的短时间内被耗尽。
ZachXBT 已trac到较早一批 22 个地址，即使在牛市早期阶段，损失也超过 620 万美元。其他链上研究人员也对可能暴露的钱包发出了警报。
Path敲响警钟已经过去两年了。
从那时起，我们已经调查了数千起此类盗窃案。
包括最近几个小时内还有 2 个。
如果您使用过 LastPass，请将您的资金迁移至新钱包。
请告诉你的朋友。
请。求求你了。 🙏 https://t.co/5xd5oYxbwb
— 泰💖 (@tayvano_) 2024 年 12 月 16 日
The only solution for users is to abandon all potentially exposed wallets. The risk remains for anyone using Last Pass before the exploit in 2022. All funds must be moved to new addresses, as the old ones are already monitored for incoming transactions.
The latest wallet attack follows a previous batch of wallets linked to Last Pass data. In October 2023, a total of 25 wallets were drained of $4.4M worth of digital coins and tokens. As previously reported, some of the wallets had substantial funds and belonged to crypto insiders, even VCs and DeFi developers.
The previous hack did not alert all wallet owners exposed to Last Pass. ZachXBT has previously warned about potentially exposed wallets, though the hackers still managed to attack more accounts.
Hacks sent straight to exchanges
Unlike other hacking attempts, the wallets were drained directly onto exchange accounts. This suggests the hacker had full control and decided to trade the funds as a way of concealing them. In one case, a wallet was drained of 15 ETH, which were sent directly to a swapping address.
Another wallet lost 32 ETH, which was sent to the FixedFloat hot wallet. The exchange was used for other wallets as well. The exchange itself is not affected and is completely neutral to the hack. However, the DEX is a regular target for hackers, used to transform funds and cover their tracks. Previously, analysts have tracked funds from an attack against Rocket Pool to the same DEX.
FixedFloat offers a simplified swap service with relatively high fees, without requiring an account or KYC. The exchange itself has been a target of hackers, when it was exploited in March for $26M in ETH and BTC.
A Step-By-Step System To Launching Your Web3 Career and Landing High-Paying Crypto Jobs in 90 Days.
推荐文章
