WazirX Hack Update: Indian Crypto Exchange Suffers $230 Million Loss

WazirX 駭客更新：印度加密貨幣交易所遭受 2.3 億美元損失

Thursday, July 18, 2024:

2024 年 7 月 18 日星期四：

On Thursday, July 18, 2024, Indian cryptocurrency exchange WazirX was compromised in a devastating security breach. The attack resulted in the theft of over $230 million worth of crypto assets.

2024 年 7 月 18 日星期四，印度加密貨幣交易所 WazirX 遭遇毀滅性安全漏洞。此次攻擊導致價值超過 2.3 億美元的加密資產被盜。

WazirX Hack: What Happened?

WazirX 駭客攻擊：發生了什麼事？

WazirX announced on their social media platform X that their multisig wallet had been compromised. The wallet was secured using Liminal's digital asset custody and wallet infrastructure.

WazirX 在他們的社群媒體平台 X 上宣布，他們的多重簽名錢包已被洩露。該錢包使用 Liminal 的數位資產託管和錢包基礎設施進行保護。

Despite security measures, the attackers exploited a discrepancy between the data displayed on Liminal's interface and the transaction contents. This allowed them to gain control over the wallet.

儘管採取了安全措施，攻擊者還是利用了 Liminal 介面上顯示的資料與交易內容之間的差異。這使他們能夠控制錢包。

The breach targeted WazirX's Ethereum multisig wallet, affecting both Ethereum (ETH) and ERC-20 tokens. The attackers stole 15,298 ETH, which they subsequently swapped for other assets, resulting in a total of 59,097 ETH (approximately $218 million).

該漏洞針對的是 WazirX 的以太坊多重簽名錢包，影響了以太坊 (ETH) 和 ERC-20 代幣。攻擊者竊取了 15,298 ETH，隨後將其兌換成其他資產，總計 59,097 ETH（約 2.18 億美元）。

WazirX's Response and Actions

WazirX 的反應與行動

In response, WazirX swiftly suspended INR and crypto withdrawals to protect remaining assets. They also filed a police complaint and reported the incident to relevant authorities.

作為回應，WazirX 迅速暫停了印度盧比和加密貨幣提款，以保護剩餘資產。他們還向警方投訴並向有關當局報告了這起事件。

WazirX has reached out to over 500 exchanges to block the identified addresses involved in the theft. Other exchanges have also reportedly cooperated with the investigation.

WazirX 已聯繫 500 多家交易所，以封鎖涉及竊盜的已識別地址。據報道，其他交易所也配合了調查。

WazirX and Liminal have blamed each other for security lapses. Liminal claims no compromise of their infrastructure and accuses WazirX of vulnerabilities.

WazirX 和 Liminal 互相指責對方有安全漏洞。 Liminal 聲稱其基礎設施沒有受到損害，並指責 WazirX 存在漏洞。

Recovery Efforts

恢復工作

Recovering the stolen funds is challenging. The hacker's Ethereum holdings have increased significantly through the liquidation of stolen assets. Additionally, they have used Tornado Cash to obscure the funds' origin and destination.

追回被盜資金具有挑戰性。透過清算被盜資產，駭客持有的以太坊大幅增加。此外，他們還使用 Tornado Cash 來掩蓋資金的來源和目的地。

WazirX is working with forensic experts and law enforcement agencies to track the funds and identify the perpetrators. They have also received support from the crypto community.

WazirX 正在與法醫專家和執法機構合作，追蹤資金並找出肇事者。他們也得到了加密社群的支持。

Impact on WazirX Investors

對 WazirX 投資者的影響

For WazirX investors, the primary concern is whether they will recover their funds. Key factors influencing the outcome include:

對於 WazirX 投資者來說，最關心的是能否收回資金。影響結果的關鍵因素包括：

• Tracing and Recovery Efforts: Forensic investigations and collaboration with law enforcement and exchanges are crucial.
• Community Support: The involvement of the crypto community enhances tracing and recovery chances.
• Legal Actions: Legal actions can assist in apprehending perpetrators and recovering funds.
• Compensation Plans: If funds cannot be fully recovered, WazirX may need to create compensation plans for affected investors.
• Use of Tornado Cash: If the stolen assets are transferred to Tornado Cash, recovery may be challenging.
• No Insider Job: WazirX's founder, Nischal Shetty, denies insider involvement, indicating a sophisticated external attack.

追蹤和恢復工作：法證調查以及與執法部門和交易所的合作至關重要。資金。 WazirX 的創始人Nischal Shetty 否認內部人員參與，表明複雜的外部攻擊。