上海夜店网

一季度黑客攻击致超10亿美元损失,欧科云链解读用技术如何保障链上资产安全

baozhanglianshanganquanshiyiqielianshangyingyongfazhandeqianti,yeshi“lianshangtianyan”danshengdechuzhong,yishiyeneizhuanyerenshigongtongnulidemubiao。

nfthedefishijinnianqukuailianlingyuzuizhideguanzhudeliangdaredian,danzaixinjishupengbofazhandetongshi,yuzhitongbubaofadeanquanyinhuanyechengleqixianweirenzhideyimian。

genjuoukeyunlianlianshangdashitongjishuju,jin2022nianyijidufashengdeshidaanquanshijianjiuyigongsunshile11.5yimeiyuanzichan,qizhongjinroninzheiyiqianquanshijianjiusunshile6.24yimeiyuan,chengweimuqianjinezuidadeheikegongjishijian。

4yue6ri,roninmugongsixuanbusky mavischoujile 1.5 yimeiyuanderongzi,youbian、a16zdengtoubujigoucantou,heqitagongsirongzibuyiyangdeshi,gailunrongzideyongtushibuchangbangeyueshouheikeyingxiangdeyonghuzijin。zheiyeyiweizhejiezhimuqianroninsunshide6.24yimeiyuanwufazhuihui。

bujindefi,jinqipinpinchuquandenftyechuxianleyinhuan,jiuzaiyizhouqian,nftshequchuxianleyiqiheikegongjishijian,huayugeshouzhoujielunzaishejiaomeitishangfawencheng,qichiyoudewuliaoyuan“bayc #3738 ”nft yibeidao。zheijianshiyexunsudengshangresou,chengweinftchuquandeyibufen,renmenyifangmianjingyagaixilienftjiazhiyijingdadaoshubaiwanrenminbi,yifangmianyoujiadaleduiqijishuanquandedanyou。

neimezaizheigexinlingyuzhong,guanyulianshanganquandaodiruhebaozhang,qukuailiananquangongsioukeyunlianjichulezhangyuandesikao。

损失6.24亿的区块链游戏

zi2021nian8yuekualianxieyio3sunshi6.11yimeiyuanzichanhou,shigebannianqukuailianlingyuzaicichuxianyiqikuazhangdeheikegongjishijian。

3yue29ri,dongnanyazuihuoredequkuailianyouxiaxie infinitymugongsisky maviskaifadeyitaifangcelianroninzaodaoheikegongji,sunshiyue6.16yimeiyuan,chaoqunian8yuedefixieyipoly networkanjianbeiheide6.11yimeiyuan,chengweidefilishishangzuidadaoqiean。

juroninguanfangbiaoshi,qishigailoudongfashengyu3yue23ri,queyin29riyimingyonghufankuitiqu5000ethshibaicaibeifaxian。cicigongji,yujijiangdaozhisunshi173600meieth(yue5.9yimeiyuan)hejiazhi2550wanmeiyuanusdc。

ruguoshixianshishijiezhongyougongsisunshi6yimeiyuanzichan,jianghuixianqijudachongji,danyouyushizailianshangshijiefasheng,henduorenqishibingbulejiedaodifashengleshenme,heikeruhedaozouleruciduozichan?

shouxian,axie infinityshiyikuanjiyuyuanyuzhougainianxiadenftyouxi,yiwanjiakeyizaiyouxizhongzhuanqujiamihuobi(p2e)demoshibaohuo,yiduchengweipaimingdiyidegamefiyouxi。

youyuaxie infinity detuanduisky mavisxiangyaoyigekekao、kuaisuqielianjiadewangluo,congerweiyouxidefazhantigongbaozhang,yushi,ronin bianshiweizhichiyouxi axie infinity ergoujiandeyitaifangcelian,shideyonghunenggouziyoudijiangzichanzhuanyidaoqitalianshang。suoyouaxiewanjiaxuyaojiangjiamizichankualiandaoronincelianshangcainengcanyuaxieyouxi。

genjuoukeyunlianlianshangtianyanfenxi,yimingheikezaojiudingshanglezheigequanqiuzuihuodequkuailianyouxi,bingzaizai 3 yue 23 rijiuyihuoli,bingjianghuolide 2550 wanmei usdc zhuanchu,jiezheduihuanwei eth,erzaibeijingshijian3yue28 ridelingchen,heikecaikaishizhuanyizijin。juguanfangchengshizaiyonghubaogaowufacongkualianqiaozhongtiqu 5000eth houcaifaxianzheicigongji。

那么黑客是如何完成攻击过程的呢?

oukeyunlianlianshangtianyanfenxi,cicigongjizheshitongguoroninderpcjiedianzhaodaohoumen,shefakongzhilesky mavisdesigeroninyanzhengjiedianheyigeyouaxie daoyunxingdedisanfangjiedian,congershixianzichandaoqie。yinroninlianyou9geyanzhengjiedianzucheng,9geyanzhengzheqianmingzhongde5getongyi,fangkecunqukuan。

suihougongjizhecongcelianronindaoquzichanhou,jiangzichankualianzhuanyidaoyitaifangdizhi:0x098b716b8aaf21512996dc57eb0615e2383e2f96,zheigedizhiyejiuchengweileheikekenengdeshenfenbiaoshi。

daoqiezijinhou,heikejiexialaijiuhuishiyongzhuanyedejishushoufajiangzijinzhuanyidaonanyizhuizongdedizhi,zheigeguochengshiyongdejishujiubeichengwei“hunbi”。

julejie,hunbideguochengshizhixuduorennimingjuzaiyiqi,batamendezijinhunzaiyiqi。ranhoubasuoyoudezijinfasongdaozheixierendedizhi,batamengezifasongdezijinjiluxialai。

suoyiheikejingchangshiyongbuyaoqiutigongshenfenxinxidejiaoyisuo,huozheshiyongtamengoumaideshenfenxinxi。duiyuheikelaijiang,zhiyaokeyidadaotamendemude,renheyoukenengdegongjudouhuibeishiyong。

suiranroninguanwangyixinyilunrongzilaihuanjieyali,dansunshidezijinbingweibeizhuihui。juoukeyunlian,jiezhimuqian,heikehuolidizhiyibeioukeyunlianlianshangtianyantuanduidashang“hack“biaoqian,chengweioukeyunlian2yidizhibiaoqiankuzhiyi,weirihoudeanjianzhuisutigongdicengjichu。youyulianshangdizhidetoumingxing,heikedizhiwangwangbuhuiqingyizhuanzhang,suoyibupaichuzuihoufanhaidekenengxing。

周杰伦损失的“无聊猿”NFT

wuduyouou,chuledefi,nftquanyefashengleanquanshijian。

4yue1riyurenjiedangtian,huayugeshouzhoujielunzaishejiaomeitishangfawencheng“gebeitoule”,juxi,qichiyoudewuliaoyuan“bayc #3738 ”nft yibeidao。zhoujielunchenggangjiedaodianhuabeigaozhiqiyourenzengyutadewuliaoyuannftbeidiaoyuwangzhangongjiershiqie,bingqiangdiaozheibushi“yurenjiewanxiao”。

suihougaishijianzaishequzhongyinqiguangfanguanzhu。juoukeyunliantigongshuju,chu1mei“wuliaoyuan”zhiwai,zhoujielunchiyoudeqitalianggexiangmu“mayc”he“doodles”yexiangjibeidao,shulianggong3mei ,zheilianggenftyeshipaimingzuiweikaoqiandehuorenftzhiyi。

jiezhimuqian,zhoujielunyigongsunshilesimeijiazhibufeidenfttouxiang。

suihou,genjuoukeyunlianlianshangshujuzhuizong,zheisimeinftyijingbeigongjizheshoumai,huoliyue54wanmeiyuan。ju etherscan shujuxianshi,heikeyijiangzhoujielunbeidaodesimei nft chushou,huoli 166.69mei eth,qizhongjinyimei“wuliaoyuan”jiushouchu111eth,yuehe39wanmeiyuan。

juxi,jiuzai3yuedi,jiuyouheikechenzhe nftjiaoyipingtaiopensea heyueshengjizhishi,jisuoyouyonghudeyouxiangfasongleyitiaodiaoyuyoujian,erbushaoyonghucuobaqidangzuoguanfangyoujianerjiangzijideqianbaoshouquan,jinerdaozhiqianbaobeidao。

jutongji,zheidiaoyuyoujianzhishaodaozhi 3 ge bayc、37 ge azuki、25 ge nft worlds deng nft beidao,anzhaodibanjiajisuan,heikeshourubianyigaoda 416 wanmeiyuan。

erzai4yue1ri,“wuliaoyuan”deguanfangdiscordzaoyuduanzanheikegongji,heikeliyongjiqirenzhanghaozaipindaoneifabuxujialianjie,zhoujielundeshiqienfthuozaigaicigongjizhongsunshi。

bunankanchu,zhiyaoshiyoudaliangzijinchendiandelingyu,heikedeshenyingjiuhuisuishichuxian。

如何保障链上安全?

yaoxiangbaozhanglianshangzichandeanquan,jiudexianlejiejishugongjidebenzhi。

yironinshijianweili,oukeyunlianfenxichengqiyuanyinshiyouyukualianqiaoquzhongxinhuachengdubugaodaozhide,defibuduanzaoshougongjibuduandeyuanyinzhuyaohaiyouduizhinengheyueshenjigongzuodezhongshidubugao,chengweiheikexunzhaoloudongchenggonglvzuigaodefangxiangzhiyi。conganquanjiaodulaishuo,dangyigexitongzugoufuzayouchengzailedaliangzijinshi,yidinghuiyouheikedingshang,changshigongjihuoli。

youqiaqiayinweironinkongzhidesiyaoqianbaopeizhizaifuwuqishang,bingqiekebeidisanfangfuwufangwen,suoyicaidaozhifuwuqicunzaibeidaosiyaokenengxing。

suizhedefizaiduogegonglianshengtaizhujianfanrong,pubiancunzaiheguixing、liudongxingfengxian,xiangmutongzhihuachengdujiaogao,bufenxiangmudechanpinjiegouhejingjimoxingshejiyeyoudaitisheng。

neimeruhecongjishujiaodufangfancileishijiandefasheng?

oukeyunlianxiangguanfuzerencheng:“zhenduijiamizichandenimingxing,lianshangtianyantongguogoujiandizhibiaoqianxitongweianjianzhenchatigongzhichi。dizhibiaoqianxitongbaokuoduodajin2yidelianshangdizhibiaoqian,nangkuoqukuailianzhuliuwangluo、zhuyaoshuzizichanheshangqianzhongdaibi,yijiguoneiwaideanwang、qianbaodengzhuduoleibiedeshitibiaoqian。zheixieshujuzhichi“yidiandaimian”depoan,congyigexiansuoyuandizhichufa,tongguodizhihuaxianghejiaoyitezhengshibie,peiheshujupengzhuanghebidui,zidonghuadehuizhipingtaizijinlianlutuopujiegou,youxiaozhuichazijinzangnidian。”

“zongeryanzhi,baozhanglianshanganquanshiyiqielianshangyingyongfazhandeqianti,yeshi“lianshangtianyan”danshengdechuzhong,yishiyeneizhuanyerenshigongtongnulidemubiao。”oukeyunlianxiangguanfuzerenbuchongdao。

未经正式授权严禁转载本文,侵权必究。

评论

暂无评论哦,快来评价一下吧!

一季度黑客攻击致超10亿美元损失,欧科云链解读用技术如何保障链上资产安全

baozhanglianshanganquanshiyiqielianshangyingyongfazhandeqianti,yeshi“lianshangtianyan”danshengdechuzhong,yishiyeneizhuanyerenshigongtongnulidemubiao。

nfthedefishijinnianqukuailianlingyuzuizhideguanzhudeliangdaredian,danzaixinjishupengbofazhandetongshi,yuzhitongbubaofadeanquanyinhuanyechengleqixianweirenzhideyimian。

genjuoukeyunlianlianshangdashitongjishuju,jin2022nianyijidufashengdeshidaanquanshijianjiuyigongsunshile11.5yimeiyuanzichan,qizhongjinroninzheiyiqianquanshijianjiusunshile6.24yimeiyuan,chengweimuqianjinezuidadeheikegongjishijian。

4yue6ri,roninmugongsixuanbusky mavischoujile 1.5 yimeiyuanderongzi,youbian、a16zdengtoubujigoucantou,heqitagongsirongzibuyiyangdeshi,gailunrongzideyongtushibuchangbangeyueshouheikeyingxiangdeyonghuzijin。zheiyeyiweizhejiezhimuqianroninsunshide6.24yimeiyuanwufazhuihui。

bujindefi,jinqipinpinchuquandenftyechuxianleyinhuan,jiuzaiyizhouqian,nftshequchuxianleyiqiheikegongjishijian,huayugeshouzhoujielunzaishejiaomeitishangfawencheng,qichiyoudewuliaoyuan“bayc #3738 ”nft yibeidao。zheijianshiyexunsudengshangresou,chengweinftchuquandeyibufen,renmenyifangmianjingyagaixilienftjiazhiyijingdadaoshubaiwanrenminbi,yifangmianyoujiadaleduiqijishuanquandedanyou。

neimezaizheigexinlingyuzhong,guanyulianshanganquandaodiruhebaozhang,qukuailiananquangongsioukeyunlianjichulezhangyuandesikao。

损失6.24亿的区块链游戏

zi2021nian8yuekualianxieyio3sunshi6.11yimeiyuanzichanhou,shigebannianqukuailianlingyuzaicichuxianyiqikuazhangdeheikegongjishijian。

3yue29ri,dongnanyazuihuoredequkuailianyouxiaxie infinitymugongsisky maviskaifadeyitaifangcelianroninzaodaoheikegongji,sunshiyue6.16yimeiyuan,chaoqunian8yuedefixieyipoly networkanjianbeiheide6.11yimeiyuan,chengweidefilishishangzuidadaoqiean。

juroninguanfangbiaoshi,qishigailoudongfashengyu3yue23ri,queyin29riyimingyonghufankuitiqu5000ethshibaicaibeifaxian。cicigongji,yujijiangdaozhisunshi173600meieth(yue5.9yimeiyuan)hejiazhi2550wanmeiyuanusdc。

ruguoshixianshishijiezhongyougongsisunshi6yimeiyuanzichan,jianghuixianqijudachongji,danyouyushizailianshangshijiefasheng,henduorenqishibingbulejiedaodifashengleshenme,heikeruhedaozouleruciduozichan?

shouxian,axie infinityshiyikuanjiyuyuanyuzhougainianxiadenftyouxi,yiwanjiakeyizaiyouxizhongzhuanqujiamihuobi(p2e)demoshibaohuo,yiduchengweipaimingdiyidegamefiyouxi。

youyuaxie infinity detuanduisky mavisxiangyaoyigekekao、kuaisuqielianjiadewangluo,congerweiyouxidefazhantigongbaozhang,yushi,ronin bianshiweizhichiyouxi axie infinity ergoujiandeyitaifangcelian,shideyonghunenggouziyoudijiangzichanzhuanyidaoqitalianshang。suoyouaxiewanjiaxuyaojiangjiamizichankualiandaoronincelianshangcainengcanyuaxieyouxi。

genjuoukeyunlianlianshangtianyanfenxi,yimingheikezaojiudingshanglezheigequanqiuzuihuodequkuailianyouxi,bingzaizai 3 yue 23 rijiuyihuoli,bingjianghuolide 2550 wanmei usdc zhuanchu,jiezheduihuanwei eth,erzaibeijingshijian3yue28 ridelingchen,heikecaikaishizhuanyizijin。juguanfangchengshizaiyonghubaogaowufacongkualianqiaozhongtiqu 5000eth houcaifaxianzheicigongji。

那么黑客是如何完成攻击过程的呢?

oukeyunlianlianshangtianyanfenxi,cicigongjizheshitongguoroninderpcjiedianzhaodaohoumen,shefakongzhilesky mavisdesigeroninyanzhengjiedianheyigeyouaxie daoyunxingdedisanfangjiedian,congershixianzichandaoqie。yinroninlianyou9geyanzhengjiedianzucheng,9geyanzhengzheqianmingzhongde5getongyi,fangkecunqukuan。

suihougongjizhecongcelianronindaoquzichanhou,jiangzichankualianzhuanyidaoyitaifangdizhi:0x098b716b8aaf21512996dc57eb0615e2383e2f96,zheigedizhiyejiuchengweileheikekenengdeshenfenbiaoshi。

daoqiezijinhou,heikejiexialaijiuhuishiyongzhuanyedejishushoufajiangzijinzhuanyidaonanyizhuizongdedizhi,zheigeguochengshiyongdejishujiubeichengwei“hunbi”。

julejie,hunbideguochengshizhixuduorennimingjuzaiyiqi,batamendezijinhunzaiyiqi。ranhoubasuoyoudezijinfasongdaozheixierendedizhi,batamengezifasongdezijinjiluxialai。

suoyiheikejingchangshiyongbuyaoqiutigongshenfenxinxidejiaoyisuo,huozheshiyongtamengoumaideshenfenxinxi。duiyuheikelaijiang,zhiyaokeyidadaotamendemude,renheyoukenengdegongjudouhuibeishiyong。

suiranroninguanwangyixinyilunrongzilaihuanjieyali,dansunshidezijinbingweibeizhuihui。juoukeyunlian,jiezhimuqian,heikehuolidizhiyibeioukeyunlianlianshangtianyantuanduidashang“hack“biaoqian,chengweioukeyunlian2yidizhibiaoqiankuzhiyi,weirihoudeanjianzhuisutigongdicengjichu。youyulianshangdizhidetoumingxing,heikedizhiwangwangbuhuiqingyizhuanzhang,suoyibupaichuzuihoufanhaidekenengxing。

周杰伦损失的“无聊猿”NFT

wuduyouou,chuledefi,nftquanyefashengleanquanshijian。

4yue1riyurenjiedangtian,huayugeshouzhoujielunzaishejiaomeitishangfawencheng“gebeitoule”,juxi,qichiyoudewuliaoyuan“bayc #3738 ”nft yibeidao。zhoujielunchenggangjiedaodianhuabeigaozhiqiyourenzengyutadewuliaoyuannftbeidiaoyuwangzhangongjiershiqie,bingqiangdiaozheibushi“yurenjiewanxiao”。

suihougaishijianzaishequzhongyinqiguangfanguanzhu。juoukeyunliantigongshuju,chu1mei“wuliaoyuan”zhiwai,zhoujielunchiyoudeqitalianggexiangmu“mayc”he“doodles”yexiangjibeidao,shulianggong3mei ,zheilianggenftyeshipaimingzuiweikaoqiandehuorenftzhiyi。

jiezhimuqian,zhoujielunyigongsunshilesimeijiazhibufeidenfttouxiang。

suihou,genjuoukeyunlianlianshangshujuzhuizong,zheisimeinftyijingbeigongjizheshoumai,huoliyue54wanmeiyuan。ju etherscan shujuxianshi,heikeyijiangzhoujielunbeidaodesimei nft chushou,huoli 166.69mei eth,qizhongjinyimei“wuliaoyuan”jiushouchu111eth,yuehe39wanmeiyuan。

juxi,jiuzai3yuedi,jiuyouheikechenzhe nftjiaoyipingtaiopensea heyueshengjizhishi,jisuoyouyonghudeyouxiangfasongleyitiaodiaoyuyoujian,erbushaoyonghucuobaqidangzuoguanfangyoujianerjiangzijideqianbaoshouquan,jinerdaozhiqianbaobeidao。

jutongji,zheidiaoyuyoujianzhishaodaozhi 3 ge bayc、37 ge azuki、25 ge nft worlds deng nft beidao,anzhaodibanjiajisuan,heikeshourubianyigaoda 416 wanmeiyuan。

erzai4yue1ri,“wuliaoyuan”deguanfangdiscordzaoyuduanzanheikegongji,heikeliyongjiqirenzhanghaozaipindaoneifabuxujialianjie,zhoujielundeshiqienfthuozaigaicigongjizhongsunshi。

bunankanchu,zhiyaoshiyoudaliangzijinchendiandelingyu,heikedeshenyingjiuhuisuishichuxian。

如何保障链上安全?

yaoxiangbaozhanglianshangzichandeanquan,jiudexianlejiejishugongjidebenzhi。

yironinshijianweili,oukeyunlianfenxichengqiyuanyinshiyouyukualianqiaoquzhongxinhuachengdubugaodaozhide,defibuduanzaoshougongjibuduandeyuanyinzhuyaohaiyouduizhinengheyueshenjigongzuodezhongshidubugao,chengweiheikexunzhaoloudongchenggonglvzuigaodefangxiangzhiyi。conganquanjiaodulaishuo,dangyigexitongzugoufuzayouchengzailedaliangzijinshi,yidinghuiyouheikedingshang,changshigongjihuoli。

youqiaqiayinweironinkongzhidesiyaoqianbaopeizhizaifuwuqishang,bingqiekebeidisanfangfuwufangwen,suoyicaidaozhifuwuqicunzaibeidaosiyaokenengxing。

suizhedefizaiduogegonglianshengtaizhujianfanrong,pubiancunzaiheguixing、liudongxingfengxian,xiangmutongzhihuachengdujiaogao,bufenxiangmudechanpinjiegouhejingjimoxingshejiyeyoudaitisheng。

neimeruhecongjishujiaodufangfancileishijiandefasheng?

oukeyunlianxiangguanfuzerencheng:“zhenduijiamizichandenimingxing,lianshangtianyantongguogoujiandizhibiaoqianxitongweianjianzhenchatigongzhichi。dizhibiaoqianxitongbaokuoduodajin2yidelianshangdizhibiaoqian,nangkuoqukuailianzhuliuwangluo、zhuyaoshuzizichanheshangqianzhongdaibi,yijiguoneiwaideanwang、qianbaodengzhuduoleibiedeshitibiaoqian。zheixieshujuzhichi“yidiandaimian”depoan,congyigexiansuoyuandizhichufa,tongguodizhihuaxianghejiaoyitezhengshibie,peiheshujupengzhuanghebidui,zidonghuadehuizhipingtaizijinlianlutuopujiegou,youxiaozhuichazijinzangnidian。”

“zongeryanzhi,baozhanglianshanganquanshiyiqielianshangyingyongfazhandeqianti,yeshi“lianshangtianyan”danshengdechuzhong,yishiyeneizhuanyerenshigongtongnulidemubiao。”oukeyunlianxiangguanfuzerenbuchongdao。

未经正式授权严禁转载本文,侵权必究。