Tom qab Solana lub hnab nyiaj tawm tsam, pab pawg Solana Status tau hloov kho cov pej xeem thiab nthuav dav tias cov chaw nyob hauv hnab nyiaj cuam tshuam los ntawm kev ua txhaum cai raug khi rau Slope mobile wallet applications. Pab pawg tau hais ntxiv tias "tsis muaj pov thawj ntawm Solana raws tu qauv lossis nws cov ntaub ntawv zais cia raug cuam tshuam."
Solana Status Report hais tias Cov chaw nyob raug cuam tshuam nyob ntawm ib qho taw tes tsim hauv Slope Mobile Wallet Applications
Lub sijhawm 48 teev dhau los, pab pawg Solana tau cuam tshuam nrog ib qho nres uas pom ntau txhiab lub hnab nyiaj raws li Solana cuam tshuam. Thaum lub sij hawm, Solana Labs co-founder thiab CEO Anatoly Yakovenko xav qhov kev siv tau tuaj yeem tshwm sim los ntawm kev tawm tsam cov khoom siv. Nws piav qhia tias iOS thiab Android hnab nyiaj tau cuam tshuam thaum nws hais tias: "feem ntau ntawm cov ntawv ceeb toom yog Slope, tab sis ob peb Phantom cov neeg siv ib yam nkaus."
Lub yim hli ntuj 3, 2022, tus Solana xwm txheej Twitter account tau piav qhia tias qhov chaw nyob cuam tshuam hauv hack tau tethered rau Slope mobile hnab nyiaj daim ntawv thov. "Tom qab kev tshawb nrhiav los ntawm cov neeg tsim khoom, pab pawg ecosystem, thiab cov neeg soj ntsuam kev nyab xeeb, nws zoo li cov chaw nyob cuam tshuam tau nyob rau ntawm ib qho chaw tsim, xa tawm, lossis siv hauv Slope mobile wallet applications," Solana Status sau. "Qhov kev siv nyiaj no raug cais tawm rau ib lub hnab nyiaj ntawm Solana, thiab cov hnab nyiaj kho vajtse siv los ntawm Slope tseem muaj kev nyab xeeb." Solana Status hais tias:
Txawm hais tias cov ntsiab lus ntawm qhov tseeb li cas qhov no tshwm sim tseem tab tom tshawb nrhiav, cov ntaub ntawv tseem ceeb ntiag tug tau raug xa mus rau qhov kev pabcuam saib xyuas daim ntawv thov. Tsis muaj pov thawj Solana raws tu qauv lossis nws cov ntaub ntawv cryptography raug cuam tshuam.
Slope Finance tau luam tawm ib qho zaj lus tshaj tawm los ntawm pab neeg lub hnab nyiaj thiab ua txhaum cov ntsiab lus tsis meej. Slope tau hais tias "Ib pawg ntawm Slope hnab nyiaj tau raug cuam tshuam hauv kev ua txhaum cai, peb muaj qee qhov kev xav txog qhov kev ua txhaum cai, tab sis tsis muaj dab tsi tseem ruaj khov, [thiab] peb hnov cov zej zog qhov mob, thiab peb tsis muaj kev tiv thaiv. Ntau ntawm peb tus kheej cov neeg ua haujlwm thiab tus tsim lub hnab nyiaj tau ntws tawm. " Slope kuj tau hais ntxiv tias pab pawg tau nquag ua haujlwm hauv kev tshawb nrhiav thiab kev tshuaj xyuas, thaum ua haujlwm nrog kev ruaj ntseg thiab tshawb xyuas pawg.
Cov kws paub txog kev ruaj ntseg hais tias Slope's Seed Phrases tau nkag rau hauv cov ntawv nyeem tau yooj yim
Thaum lub sijhawm tshaj tawm txoj haujlwm, pab pawg Slope tau hais ntxiv tias cov neeg siv lub hnab nyiaj Slope "tsim ib lub hnab nyiaj tshiab thiab tshwj xeeb, thiab hloov tag nrho cov khoom muaj nqis rau lub hnab nyiaj tshiab no." Slope ntxiv:
Yog tias koj siv lub hnab nyiaj kho vajtse, koj cov yuam sij tsis raug cuam tshuam.
Cov ntaub ntawv los ntawm Dune Analytics qhia tau hais tias muaj ntau qhov chaw nyob tshwj xeeb uas tau cuam tshuam los ntawm kev ua txhaum cai tshaj li qhov pib tshaj tawm. Kev txheeb cais qhia tias 9,223 qhov chaw tshwj xeeb raug kev txom nyem los ntawm kab laum thiab $ 4,088,121 hauv crypto raug nyiag lawm. Feem ntau ntawm cov cuab tam hacked tau ua los ntawm solana (SOL) thiab SOL-based USDC.
Nws yog ua hais tias tias Slope's mnemonic noob kab lus pauv mus rau Slope's server tau nkag rau hauv cov ntawv nyeem tau. Pab pawg Slope hnab nyiaj tau liam tias khaws cov mnemonics hauv kev debug logging software ntawm lub hauv paus ntawm Sentry server. Cov kws paub txog kev ruaj ntseg ntawm Ottersec ntxaws hais tias "txhua tus neeg uas nkag mus rau Sentry tuaj yeem nkag mus rau [ib] tus neeg siv tus yuam sij ntiag tug." Ottersec kuj tau sau tseg tias pab pawg Slope tau "pab tau zoo heev hauv kev sib qhia cov ntaub ntawv cuam tshuam nrog kev hack."
Koj xav li cas txog cov teeb meem nrog Slope hnab nyiaj thiab cov kev siv tsis ntev los no uas cuam tshuam rau cov neeg siv Solana? Qhia rau peb paub koj cov kev xav txog cov ncauj lus no hauv cov lus hauv qab no.
Duab Credit: Shutterstock, Pixabay, Wiki Cov Lus Qhia
Disclaimer: Kab lus no tsuas yog rau kev ua ntaub ntawv xwb. Nws tsis yog qhov ncaj qha lossis kev thov rau qhov kev yuav lossis muag, lossis kev pom zoo lossis kev pom zoo ntawm ib yam khoom, kev pabcuam, lossis tuam txhab. Bitcoin.com tsis muab peev, peev nyiaj, cai lij choj, lossis tswv yim nyiaj txiag. Tsis yog cov tuam txhab lossis cov neeg sau ntawv ua lub luag haujlwm, ncaj qha lossis tsis ncaj rau, rau ib qho kev puas tsuaj lossis poob lossis ua rau raug iab liam los ntawm lossis kev sib txuas nrog kev siv lossis kev cia siab rau qee cov ntsiab lus, khoom muag lossis kev pabcuam tau hais hauv tsab xov xwm no.
Tau qhov twg los: https://news.bitcoin.com/solanas-investigation-indicates-wallet-exploit-tied-to-slope-mobile-app/