Ib tug xov tooj ntawm defi dapps, feem ntau prominently Convex Finance, tau lawv lub npe hijacked.
ConvexFinance, Ribbon Finance, DeFiSaver thiab Allbridge tau cuam tshuam nrog cov neeg siv pom zoo cov ntawv cog lus phem thaum nyob rau ntawm qhov tseeb ntawm qhov project.
Tus neeg sau npe rau tag nrho cov npe no yog NameCheap, nrog nws tus CEO, Richard Kirkendall, hais tias:
"Peb tau taug qab qhov no mus rau ib tus neeg sawv cev pabcuam Cov Neeg Siv Khoom tshwj xeeb uas tau raug nyiag los yog cuam tshuam qee yam thiab tau tshem tawm tag nrho cov kev nkag los ntawm tus neeg sawv cev no. Qhov no cuam tshuam rau ob peb lub hom phiaj tab sis peb yuav tshawb xyuas ntxiv. "
Vam tias nws kuj tau raug ceeb toom rau tub ceev xwm thiab raug kaw vim qhov no yog qhov tseeb thiab ncaj ncees ntawm tub sab nyiag nrog tag nrho cov pov thawj xav tias muaj, yog li nws yuav tsum tau sim luv luv.
Tab sis lub hack los yog hijack yog kom meej meej tsis sophisticated txhua. Qee tus neeg ua haujlwm ntawm NameCheap nyuam qhuav hloov qhov chaw nyob IP uas tus sau tau taw qhia, nrog rau txhua tus saib zoo ib yam ntawm cov neeg rau zaub mov phem tshiab, suav nrog thawj thiab plaub tus lej kawg ntawm qhov chaw nyob ethereum.
Kuv tsis muaj dab tsi tshwm sim tab sis ua 100% tseeb tias koj pom zoo raws nraim 0xF403C135812408BFbE8713b5A23a04b3D48AAE31
yog tias koj siv @ConvexFinance make sure you did not approve: 0xF403a2c10B0B9feF8f0d4F931df5d86aD187AE31 https://t.co/QTsi6BV1Zj
— alexintosh.eth | Kuv ntiav (@Alexintosh) Lub rau hli ntuj 23, 2022
Yog li lawv tau siv qhov chaw nyob tsis zoo, thiab qhov ntawd tsis yog qhov nyuaj vim tias koj tsuas yog txuas ntxiv mus tsim chaw nyob tshiab kom txog thaum koj pom ib qho uas zoo sib xws.
Cov txheej txheem no tau yooj yim dua tus lej koj xav tau 'kev cai' los ntawm bot software txhaj tsim qhov chaw nyob tshiab.
Tib neeg muaj peev xwm nco tau nyob rau hauv lub sij hawm luv luv nco txog rau tus lej yooj yim rau yuav luag txhua tus, thiab rau feem ntau lawv tuaj yeem nco tau xya tus lej, txawm tias tsis yooj yim tag nrho.
Ob peb qhov chaw nyob tsis pom kev tuaj yeem mus rau xya tus lej, tab sis ntau yuav tsis yog qhov tseeb hauv kev txheeb xyuas ib qho, nrog rau revoke.cash tso cai rau koj tshem tawm kev tso cai rau ib daim ntawv cog lus ntse, txawm hais tias qhov no tag nrho cov nyiaj tau raug tshem tawm lawm.
Tab sis muaj ib tus neeg ua haujlwm nyob ntawm no thiab koj xav tias NameCheap yuav tsum koom tes nrog lossis lawv tus kheej raug sim - kev sim ua txhaum cai - yog li recouping qee cov nyiaj yuav tsum ua tau.
Vim tias tus neeg ua haujlwm no xav paub txog leej twg lawv tau hloov tus IP, lossis lawv tau txais ob npaug / triple lub sijhawm kaw. Yog li thaum kawg peb yuav muaj rooj plaub ntawm cov neeg ruam ruam.
Thiab raws li Kirkendall, kev ua txhaum cai lij choj zoo nkaus li tsuas yog kev daws teeb meem ntawm no vim tias tsawg kawg qee tus neeg ua haujlwm pom meej xav tau lub peev xwm hloov IP thaum muaj kev nyiag lossis kev tsim txom.
Rau qhov kawg, qhov kev daws teeb meem zoo dua yuav yog tshem tawm cov npe lossis ncua nws es tsis rov ncaj qha. Rau kev hack, tej zaum tsis muaj ntau txoj kev xaiv, tab sis qhov no yog kev ua txhaum cai ruam thiab yog li peb cia siab tias yuav raug foob tag nrho thiab qhov ntawd yuav tsum muaj kev cuam tshuam txaus.
Vim tias tsis muaj txoj hauv kev no tuaj yeem ua tiav yam tsis paub tias leej twg ua raws nraim qhov kev txiav txim, nrog Kirkendall lees paub tias lawv khaws cov ntaub ntawv ntawm txhua qhov kev hloov pauv thiab kev ua haujlwm.
Ua qhov no zoo ib yam li qhov luv luv SIM hacking ntu uas tub sab yuav tau txais ib tus neeg tus lej siv qhov ntawd rau ob qho kev lees paub.
Nws yog ib qho yooj yim mus nrhiav leej twg nug tus lej ntawd, thiab ntawm no tus neeg ua haujlwm paub txog NameCheap, thiab yog li koj kaw qee qhov thiab qhov ntawd yuav tsum yog qhov kawg ntawm nws vim tias nws tau lees tias kaw kaw yog tias koj siv txoj kev no thiab cov nyiaj yuav raug txeeb tshwj tsis yog koj xav kom kaw lub sij hawm mus txog lub neej.
Kuj tseem muaj lwm cov kev daws teeb meem zoo li Ethereum Lub Npe Kev Pabcuam (ENS), txawm hais tias peb tsis pom qhov ntawd siv ntau rau cov npe nyob hauv kev tsim khoom, thiab tseem muaj. BGP hijacks qhov twg ISP redirects rau siab phem, tab sis ntawm no ib yam nkaus thiab cov tub ceev xwm yuav nrhiav tau tus neeg ua hauj lwm thiab leej twg ua nws.
Yog li qhov kev daws teeb meem yog rau cov tub sab no kom paub tseeb tias lawv tau dag los ntawm peb cov nyiaj se ua kom pom tseeb dhau los ntawm cov tub ceev xwm ua txoj haujlwm nws tau them rau, uas feem ntau lawv yuav.
Thaum qhov kev daws teeb meem ib ntus yuav tsum tau ceeb toom me ntsis tam sim no, tshawb xyuas txog xya tus lej tsawg kawg, thiab yog tias koj tau pom zoo yav dhau los, tshawb xyuas ntau dua.
Vim tias lawv tuaj yeem dag ntau yam, tab sis lawv tsis tuaj yeem dag qhov chaw nyob tiag tiag, nrog rau nws tsis paub meej tias nyob rau lub sijhawm ntev tseem muaj peev xwm AI cov kev daws teeb meem uas MetaMask lossis Etherscan ceeb toom koj.
Qhov ntawd yuav zoo li tsis txaus ntseeg tias tam sim no koj muaj tus neeg saib xyuas lub hauv paus qhia koj tias yuav tsum ntseeg dab tsi, tab sis koj tuaj yeem tsis quav ntsej lawv yog tias koj xav tau thiab lawv tsis tuaj yeem yuam koj ua ib yam dab tsi, zoo li tsuas yog hloov koj tus IP sau npe raws li hauv cov ntaub ntawv hauv nruab nrab.
Tau qhov twg los: https://www.trustnodes.com/2022/06/25/defi-dapps-dns-attacked