According to the founder of the SlowMist team, Cosine posted on the X platform, looking at the two stolen replays of FixedFloat, saying that the root cause of the problem came from the Time4VPS hosting service provider, which was cheap but unreliable. In particular, the attacker gained all the functional permissions of the host, including global access to all available servers, which made the previous measures completely ineffective.
据SlowMist团队创始人余弦在X平台发文称,看了下 FixedFloat 两次被盗的复盘,说是问题根源来自 Time4VPS 这个主机服务商,便宜是便宜但是不靠谱,尤其是:攻击者获得了主机的所有功能权限,包括对所有可用服务器的全局访问权限,这使得之前采取的措施完全无效。
On May 7, the decentralized exchange FixedFloat tweeted that it has restarted its service and is currently in a limited mode. Many cryptocurrencies cannot be exchanged yet, but they will gradually resume, and all obligations related to orders and refunds will be fulfilled as soon as possible.
5月7日消息,去中心化交易所FixedFloat发推表示,已重启服务,目前处于有限模式,许多加密货币尚无法兑换,但将逐渐恢复,所有与订单和退款相关的义务将尽快履行。
据Web3安全公司Cyvers称,去中心化交易所FixFloat基于以太坊的热钱包发现了几笔可疑交易,导致过去一天提款280万美元。Peckshield称,消息传出后,稳定币发行商Tether将涉及这些提款的10个地址列入黑名单,冻结了价值约40万枚USDT。
FixedFloat, a decentralized exchange, stated on the X platform, "On April 1st, we were once again attacked by the behind the scenes attackers of the February 16th hacker attack. The attackers did not give up and continued to use various methods to attempt to attack our services again. We successfully..."
去中心化交易所 FixedFloat 在 X 平台表示:“4 月 1 日,我们再次遭受了 2 月 16 日黑客攻击的幕后攻击者的攻击。攻击者并未就此罢休,继续采用各种方法试图再次攻击我们的服务。我们成功地...
According to CyversAlerts monitoring, the system has detected suspicious transactions on FixedFloat. About 14 hours ago, $2.8 million was extracted from its hot wallet on the ETH chain and directed to a suspicious address, which subsequently received various digital assets including ETH, USDT, WETH, DAI, and USDC.
据CyversAlerts监测,系统检测到FixedFloat上的可疑交易。大约14小时前,从其ETH链上的热钱包中提取280万美元,这些资金被定向到一个可疑地址,该地址随后收到了各种数字资产,包括ETH、USDT、WETH、DAI和USDC。 可疑地址立即通过DEX将这些资产兑换成ETH,然后将所有资金转移到eXch交易所。这些交易之后,热钱包停止运营,该公司网站目前正在进行维护。
According to Cyvers Alert monitoring, the system has detected multiple suspicious transactions on Prisma Finance that are still ongoing. So far, the total loss is approximately 9 million US dollars. The attacker's source of funds is FixedFloat.
据Cyvers Alerts监测,系统检测到Prisma Finance上多笔可疑交易并且仍在进行中。迄今为止总损失约为 900 万美元。攻击者的资金来源为FixedFloat。