Potential Security Breach at Indian Cryptocurrency Exchange WazirX

印度加密货币交易所 WazirX 存在潜在安全漏洞

Indian cryptocurrency exchange WazirX is facing a possible security breach, as reported by cybersecurity firm Cyvers Alerts. Unauthorized transactions involving WazirX's Safe Multisig wallet resulted in the loss of approximately $234.9 million worth of funds on the Ethereum network.

据网络安全公司 Cyvers Alerts 报道，印度加密货币交易所 WazirX 正面临可能的安全漏洞。涉及 WazirX 安全多重签名钱包的未经授权交易导致以太坊网络损失约 2.349 亿美元的资金。

According to Cyvers Alerts, the transactions originated from accounts funded by TornadoCash, a cryptocurrency mixing service known for obscuring transaction trails. This raises suspicions about the legitimacy of the transfers.

据 Cyvers Alerts 称，这些交易源自 TornadoCash 资助的账户，TornadoCash 是一种加密货币混合服务，以模糊交易轨迹而闻名。这引发了人们对此次转让的合法性的怀疑。

Cyvers Alerts alleges that the stolen funds were swiftly converted from various digital assets, including $PEPE, $GALA, and $USDT, into Ethereum ($ETH) and then into other digital assets. This rapid conversion suggests an attempt to launder the stolen funds. The attacker currently holds over $100 million worth of SHIB and over $4.7 million FLOKI for potential sale.

Cyvers Alerts 声称，被盗资金迅速从各种数字资产（包括 $PEPE、$GALA 和 $USDT）转换为以太坊（$ETH），然后转换为其他数字资产。这种快速的转换表明有人试图洗钱被盗资金。攻击者目前持有价值超过 1 亿美元的 SHIB 和超过 470 万美元的 FLOKI 可供出售。

The stolen tokens include significant amounts of Shib, ETH, Matic, Pepe, USDT, Gala, and others. They have been transferred from WazirX to the wallet "0x04b2." The attacker has already sold nearly 640.27 billion Pepe tokens ($7.6 million).

被盗代币包括大量 Shib、ETH、Matic、Pepe、USDT、Gala 等。它们已从 WazirX 转移到钱包“0x04b2”。攻击者已售出近 6402.7 亿个 Pepe 代币（760 万美元）。

Cyvers Alerts claims to have attempted contacting WazirX 30 minutes before issuing the public alert, but did not receive a response.

Cyvers Alerts 声称在发布公共警报前 30 分钟尝试联系 WazirX，但没有收到回复。

However, WazirX has since released a statement acknowledging the breach and stating that its team is investigating the incident. To protect user funds, INR and crypto withdrawals have been temporarily suspended.

然而，WazirX 此后发布了一份声明，承认此次违规行为，并表示其团队正在调查该事件。为了保护用户资金，印度卢比和加密货币提现已暂停。

This incident underscores the critical importance of cybersecurity in the cryptocurrency industry. Investors are advised to be cautious when using exchange platforms and to monitor their accounts for any suspicious activity.

这一事件凸显了网络安全在加密货币行业中的至关重要性。建议投资者在使用交易平台时保持谨慎，并监控其账户是否有任何可疑活动。