Blockchain auditing tuam txhab tseem tab tom sim xyuas seb yuav ua li cas hackers tau nkag mus txog li 8,000 tus yuam sij ntiag tug siv los tso cov hnab nyiaj hauv Solana.
Kev tshawb nrhiav tau txuas ntxiv tom qab cov neeg tawm tsam tau tswj hwm nyiag qee qhov $5 lab tus nqi ntawm Solana (SOL) thiab Solana Program Library (SPL) tokens hnub Wednesday. Cov neeg koom nrog Ecosystem thiab cov tuam txhab kev ruaj ntseg tau pab los nthuav tawm qhov tsis sib xws ntawm qhov kev tshwm sim.
Solana tau ua haujlwm ze nrog Phantom thiab Slope.Finance, ob lub hnab nyiaj hauv Solana uas muaj cov neeg siv nyiaj cuam tshuam los ntawm kev siv nyiaj. Nws tau tshwm sim txij li thaum qee tus yuam sij ntiag tug uas raug cuam tshuam tau ncaj qha mus rau Slope.
Blockchain tshawb xyuas thiab kev ruaj ntseg tuam txhab Otter Security thiab SlowMist tau pab hauv kev tshawb nrhiav tsis tu ncua thiab nthuav tawm lawv cov kev tshawb pom hauv kev sau ncaj qha nrog Cointelegraph.
Otter Security tus tsim Robert Chen qhia kev nkag siab los ntawm thawj-tes nkag mus rau cov peev txheej cuam tshuam nrog kev koom tes nrog Solana thiab Slope. Chen tau lees paub tias ib feem ntawm cov hnab nyiaj cuam tshuam muaj cov yuam sij ntiag tug uas muaj nyob ntawm Slope's Sentry logging servers hauv cov ntawv dawb:
"Qhov kev xav ua haujlwm yog tias tus neeg tawm tsam qee yam tshem tawm cov cav no thiab tuaj yeem siv qhov no los cuam tshuam cov neeg siv. Qhov no tseem yog kev tshawb nrhiav tsis tu ncua, thiab cov pov thawj tam sim no tsis piav qhia tag nrho cov nyiaj raug cuam tshuam. "
Chen kuj tau hais rau Cointelegraph tias qee qhov 5,300 tus yuam sij ntiag tug uas tsis yog ib feem ntawm kev siv tau pom hauv Sentry piv txwv. Yuav luag ib nrab ntawm cov chaw nyob no tseem muaj cov tokens hauv lawv - nrog cov neeg siv tau hais kom txav nyiaj yog tias lawv tsis tau ua tiav lawm.
Pab pawg SlowMist tuaj rau qhov zoo sib xws tom qab raug caw los txheeb xyuas qhov kev siv los ntawm Slope. Pab neeg no kuj tau sau tseg tias Sentry kev pabcuam ntawm Slope Wallet tau sau tus neeg siv cov kab lus mnemonic thiab tus yuam sij ntiag tug thiab xa mus rau o7e.slope.finance. Ib zaug ntxiv, SlowMist nrhiav tsis tau ib qho pov thawj piav qhia tias cov ntaub ntawv pov thawj raug nyiag li cas.
Cointelegraph kuj tau hu rau Chainalysis, uas tau lees paub tias nws tau ua tiav kev tshuaj xyuas blockchain ntawm qhov xwm txheej tom qab sib qhia thawj zaug. kev tshawb pom online. Lub tuam txhab kev tshuaj xyuas blockchain kuj tau sau tseg tias qhov kev siv dag zog feem ntau cuam tshuam rau cov neeg siv uas tau xa nyiaj tuaj rau lossis los ntawm Slope.Finance.
Thaum qhov xwm txheej tshem tawm Solana los ntawm kev coj tus cwj pwm ntawm kev siv dag zog, qhov xwm txheej tau hais txog qhov xav tau rau kev soj ntsuam cov kev pabcuam ntawm cov neeg muab khoom siv hnab nyiaj. SlowMist tau pom zoo tias cov hnab nyiaj yuav tsum tau kuaj xyuas los ntawm ntau lub tuam txhab kev ruaj ntseg ua ntej tso tawm thiab hu rau qhib qhov kev txhim kho kom muaj kev ruaj ntseg.
Chen tau hais tias qee tus neeg muab khoom siv hnab nyiaj tau "ntev hauv qab radar" thaum nws los txog kev nyab xeeb thaum piv rau cov ntawv thov kev lag luam. Nws cia siab tias yuav pom qhov xwm txheej hloov cov neeg siv kev xav rau kev sib raug zoo ntawm cov hnab nyiaj thiab kev siv tau los ntawm cov neeg koom nrog kev ruaj ntseg sab nraud.
Tau qhov twg los: https://cointelegraph.com/news/experts-find-private-keys-on-slope-servers-still-puzzled-over-access