https://medium.com/@numencyberlabs/the-private-key-of-qanplatform-was-cracked-by-hackers-causing-1-9-million-losses-8673a54fbb20
Kunci Pribadi platform QAN Diretas oleh Peretas, Menyebabkan Kerugian $1,9 Juta!
Pada 11 Oktober, menurut pemantauan on-chain, Numen Cyber labs menemukan bahwa proyek jembatan lintas rantai platform QAN diserang, yang diduga disebabkan oleh kebocoran kunci privat. Itu menyebabkan kerugian sekitar $1,9 juta dan harga QANX juga anjlok hingga 93%. Saat ini, fungsi perdagangan, penyetoran, dan penarikan CEX telah ditangguhkan. Tim proyek mengatakan bahwa mereka telah mengambil snapshot keadaan sebelum serangan, dan likuiditas di kumpulan Uniswap dan Pancakeswap ditarik. Token baru akan dikirimkan ke pengguna untuk mengurangi kerugian mereka.
Seperti yang kita semua tahu, keamanan kunci pribadi dompet juga menjadi prioritas utama keamanan aset. Disarankan agar pengguna menyimpannya dengan benar dan tidak menggunakan alat yang tidak aman untuk menghasilkan alamat dompet. Selanjutnya, mari kita lihat lebih dekat serangan ini.
Alamat dompet kebocoran kunci pribadi：
https://bscscan.com/address/0x68e8198d5b3b3639372358542b92eb997c5c314a
Alamat peretas：
https://etherscan.io/address/0xf163a6cab228085935fa6c088f9fc242afd4fb11
Transaksi serangan BSC：
https://bscscan.com/tx/0xf93047e41433d73ddf983cfa008aeb356ec89803c0a92b0e97ccdc6c42a13f51
Transaksi serangan ETH ：
https://etherscan.io/tx/0x048a1a71fd41102c72427cc1d251f4ecbf70558562564306e919f66fd451fe82
Analisis Serangan
2. Peretas kemudian melanjutkan menggunakan alamat 0x68e8198d5b3b3639372358542b92eb997c5c314a untuk memulai transaksi di ETH, dan kemudian memanggil fungsi bridgeWithdraw dari kontrak jembatan lintas rantai BridgeQANX untuk mentransfer 1431880339 token QANX ke alamat dompet 0xF163A6cAB2280859935Fa6Fc0835Fa6c08
3. Kami menganalisis rincian kedua transaksi tersebut. Penelepon dari dua transaksi serangan adalah alamat dompet 0x68e8198d5b3b3639372358542b92eb997c5c314a, dan pembuat kontrak jembatan lintas rantai adalah alamat yang sama. Oleh karena itu, kami yakin bahwa serangan ini mungkin disebabkan oleh kebocoran kunci pribadi pihak proyek.
4. Saat ini, peretas telah menukar token QANX dari rantai BSC ke BNB dan mentransfernya melalui Tornado.Cash. Masih ada 105.277.9073 token di rantai ETH yang saat ini ada di alamat peretas.
Ringkasan
Lab Dewa Cyber akan terus memperhatikan aliran modal dari serangan ini dan langkah-langkah perbaikan tindak lanjut dari pihak proyek. Ini juga mengingatkan pengguna dan pihak proyek untuk memperhatikan penjagaan kunci pribadi dan mnemonik dompet mereka, dan tidak menggunakan alat yang tidak dapat dipercaya untuk Menghasilkan alamat dompet, karena itu adalah kunci untuk membuka dompet Anda dan dapat menyebabkan hilangnya aset Anda secara langsung.
Donald Trump has rebranded his crypto platform to "World Liberty Financial," with his sons actively promoting the venture. This move, along with the launch of his fourth NFT collection, is part of a broader strategy to position the US as a global leader in cryptocurrency.
CatherinePlastic surgery didn’t stop South Korean police from arresting the leader of a crypto scam that defrauded investors of 16 billion won (USD 12 million). Despite his extreme makeover, the man was tracked down using surveillance footage, phone records, and internet searches.
KikyoElon Musk and Tesla won a $258 billion lawsuit claiming Musk manipulated Dogecoin's price through tweets. The judge dismissed the case, ruling that Musk's statements were just "aspirational puffery" and not reliable financial advice.
JoyCrypto.com has launched global retail services, allowing users to deposit and withdraw crypto in over 90 countries. The expansion, starting in the UAE, is supported by Standard Chartered and aims to make cryptocurrency transactions more accessible and secure.
WeatherlyThe decentralised social media platform Nostr saw a sharp rise in user activity after Telegram CEO Pavel Durov's arrest in France, as concerns over regulatory interference drive users toward privacy-focused alternatives.
CatherinePrudential Singapore and AI CREATE's "The Dream Creator" will feature AI-driven interactive art at the ArtScience Museum as part of the "In the Ether" festival from 1-30 September 2024. Presented by the ArtScience Museum in partnership with Ethereum Singapore, the festival will showcase the role of blockchain and AI in innovation.
JoyBackstage information on the official website of Trump’s new project World Liberty Financial has been exposed, and the content mentions that he is prepared to provide safe, high-yield cryptocurrency investment opportunities.
Alex"Harry Potter: Magic Awakened" will close in the Americas, Europe, and Oceania on 29 October, just over a year after its international launch. The shutdown, due to low revenue, indicates a petition to save the game is unlikely to succeed.
KikyoRipple has expanded its bank ID to China and Hong Kong, but one user clarified that the update did not authorize XRP tokens for these transactions.
AlexSouth Korea is battling a surge of deepfake pornography, and the government is cracking down on Telegram, the messaging app where much of this content is being shared. The Korean Communications Standards Commission is requesting help from France to investigate Telegram and is urging other social media platforms to take action.
Anais