Cryptonews

Error 500 (Server Error)!!1500.That’s an error.There was an error. Please try again later.That’s all we know.

Source
CryptoNewsTrend
Published
Error 500 (Server Error)!!1500.That’s an error.There was an error. Please try again later.That’s all we know.

朝鲜政府支持的黑客变得越来越复杂、更加精确,目前仅今年一年就造成了超过 76% 的加密货币损失,即近 6 亿美元。

例如,价值 285 美元的漂移协议漏洞涉及 TRMLabs 所描述的长期且“史无前例的面对面社会工程”攻击。 It included months of in-person meetings between North Korean proxies and Drift employees.

TRMLabs 全球政策和政府事务主管 Ari Redbord 告诉 CoinDesk:“在几个月的时间里,朝鲜代理人与协议员工坐在桌子对面。据我所知,这在朝鲜的加密货币黑客活动中是前所未有的。” “This is no longer just a remote keyboard operation.”

Ari 的评论伴随着 TRMLabs 周四发布的新报告,该报告强调了朝鲜的两个主要黑客组织 DPRK 和 Lazarus 对 2026 年因黑客和利用而造成的所有加密货币损失的 76% 负有责任。

“What we are watching is not a North Korean campaign that is broader — it is one that is sharper,” Redbord said in the report. "North Korea is moving faster and more precisely than ever.”

“North Korea's cumulative crypto theft now exceeds $6 billion attributed incidents since 2017,” TRM Labs’ report adds.

TRMLabs 的调查结果与 Wasabi 协议漏洞一致,该漏洞利用了与 Drift 4 月 19 日黑客攻击类似的剧本,其中攻击者使用了没有时间锁或多重签名的受损部署者密钥,损失了 450 万美元。

The $292 million KelpDAO breach exploited a known single-verifier flaw that LayerZero had repeatedly warned against.

The playbook was vastly different from the Drift exploit, according to TRMLabs.黑客将 Drift 收益转换为 USDC,桥接到以太坊,再兑换为 ETH,并且自盗窃之日起就没有转移这些收益,这与朝鲜耐心的多年套现模式是一致的。

报告解释说,相比之下,Lazarus 拿走了他们的 KelpDAO 收益,并立即通过 THORChain 和 Umbra 进行洗钱,而这几乎完全由运营有据可查的 TraderTraitor 剧本的中国中介机构处理。

Kelp DAO 漏洞引发了 DeFi 最大的损失,多个借贷平台损失了 130 亿美元,其中最引人注目的是 Aave,该平台在 48 小时内损失了 85.4 亿美元的存款,导致其陷入近 200 美元的坏账危机,行业参与者现在正在通过承诺提供 3 亿美元来帮助其缓解危机。

Error 500 (Server Error)!!1500.That’s an error.There was an error. Please try again later.That’s all we know.