慢雾余弦：GMGN 黑客通过貔貅盘撤池方式卷走用户资金，获利超 70 万美元

ChainCatcher 3 weeks ago 227

ChainCatcher 消息，慢雾余弦在 X 平台发文表示：“看了下提交给我们的几十条与 GMGN 有关的被盗情报，共性：用户的私钥没有泄露，但 SOL ($131.52) BNB ($877.97) 都被买入了貔貅盘（即只能买不能卖），黑客主要通过将貔貅盘撤池子方式卷走用户资金，获利超 70 万美元。能造成这种情况的（又不是私钥泄露），大概率是较高级的钓鱼方式导致。由于 GMGN 已经修复相关问题，复现不容易，猜测与 GMGN 账号模式有关，用户访问钓鱼网站，钓鱼网站获取用户 GMGN 账号模式的登录签名信息，比如得到 access_token 与 refresh_token 值，接管用户账号权限，但是没有用户的 2FA，没法直接导出私钥或提币，于是通过貔貅盘来实现用户资金的“对敲”攻击，间接盗走用户资产。”

BitRss shares this Content always with

License.

Read Entire Article

Screenshot generated in real time with SneakPeek Suite

Search Crypto News

The latest Top News, only from Leading exponents of BlockChain, Bitcoin, Altcoins and different Accredited Crypto Currency Sources.

Since 2015, our Mission was to Share, up-to-date, those News and Information we believe to represent in an Ethical and sincere manner the current Crypto Currencies World: everything you are looking for, in one place!

We have always tried to give priority to the News and the Sources; for this reason we have designed this New Version of BitRss.com with a clean and simple Style, usable by all Devices, fast and effective. Our exclusive Algorithm, in addition to filtering (a lot..) sponsored content of dubious interest, Lists the News, in Chronological order of Publication on the Internet, allowing our Users to Follow the Flow of Articles in a fast and intuitive way.

You can also check the Cryptocurrency Price in Real Time directly in the shared Articles (the TAG's highlighted in green), which allows you to Learn more about the Market Trend of that particular Coin with many other related information. Each content includes always a Screenshot of the Article's Source.