Potential Security Breach at Indian Cryptocurrency Exchange WazirX

印度加密貨幣交易所 WazirX 有潛在安全漏洞

Indian cryptocurrency exchange WazirX is facing a possible security breach, as reported by cybersecurity firm Cyvers Alerts. Unauthorized transactions involving WazirX's Safe Multisig wallet resulted in the loss of approximately $234.9 million worth of funds on the Ethereum network.

根據網路安全公司 Cyvers Alerts 報道，印度加密貨幣交易所 WazirX 正面臨可能的安全漏洞。涉及 WazirX 安全多重簽章錢包的未經授權交易導致以太坊網路損失約 2.349 億美元的資金。

According to Cyvers Alerts, the transactions originated from accounts funded by TornadoCash, a cryptocurrency mixing service known for obscuring transaction trails. This raises suspicions about the legitimacy of the transfers.

據 Cyvers Alerts 稱，這些交易源自 TornadoCash 資助的帳戶，TornadoCash 是一種加密貨幣混合服務，以模糊交易軌跡而聞名。這引發了人們對此次轉讓的合法性的懷疑。

Cyvers Alerts alleges that the stolen funds were swiftly converted from various digital assets, including $PEPE, $GALA, and $USDT, into Ethereum ($ETH) and then into other digital assets. This rapid conversion suggests an attempt to launder the stolen funds. The attacker currently holds over $100 million worth of SHIB and over $4.7 million FLOKI for potential sale.

Cyvers Alerts 聲稱，被盜資金迅速從各種數位資產（包括 $PEPE、$GALA 和 $USDT）轉換為以太坊（$ETH），然後轉換為其他數位資產。這種快速的轉換表明有人試圖洗錢被盜資金。攻擊者目前持有價值超過 1 億美元的 SHIB 和超過 470 萬美元的 FLOKI 可供出售。

The stolen tokens include significant amounts of Shib, ETH, Matic, Pepe, USDT, Gala, and others. They have been transferred from WazirX to the wallet "0x04b2." The attacker has already sold nearly 640.27 billion Pepe tokens ($7.6 million).

被盜代幣包括大量 Shib、ETH、Matic、Pepe、USDT、Gala 等。它們已從 WazirX 轉移到錢包“0x04b2”。攻擊者已售出近 6,402.7 億個 Pepe 代幣（760 萬美元）。

Cyvers Alerts claims to have attempted contacting WazirX 30 minutes before issuing the public alert, but did not receive a response.

Cyvers Alerts 聲稱在發佈公共警報前 30 分鐘嘗試聯繫 WazirX，但沒有收到回應。

However, WazirX has since released a statement acknowledging the breach and stating that its team is investigating the incident. To protect user funds, INR and crypto withdrawals have been temporarily suspended.

然而，WazirX 此後發布了一份聲明，承認此次違規行為，並表示其團隊正在調查該事件。為了保護用戶資金，印度盧比和加密貨幣已提領現已暫停。

This incident underscores the critical importance of cybersecurity in the cryptocurrency industry. Investors are advised to be cautious when using exchange platforms and to monitor their accounts for any suspicious activity.

這事件凸顯了網路安全在加密貨幣產業中​​的至關重要性。建議投資者在使用交易平台時保持謹慎，並監控其帳戶是否有任何可疑活動。