Exchange Ranking
Top Exchanges
24h Volume Ranking
Popularity Ranking
Exchange BTC Balance
Proof of Reserves
Decentralized Exchanges
Funding Rate
Funding Heatmap
Liquidation Data
Max Pain
Long/Short Ratio
Whale L/S Ratio
Binance/Okex/Huobi L/S
Bitfinex Margin L/S
ETF Tracker
Solana ETF
XRP ETF
Hong Kong ETF
Bitcoin Treasuries
Crypto Reversal
Ethereum Reserves
HyperLiquid Wallet Analysis
Hyperliquid Whale Watch
Large Transactions
On-chain Movement
Bitcoin ROI
Stablecoin Market Cap
Options Analysis
News
Articles
Economic Calendar
Features
Wallet
Contract Calculator
Security
Collections
Watchlist
Following
XRP 白帽行动：2.3万枚NFT在支付处理器漏洞事件中被成功找回
9月25日，一个与匿名安全研究人员Quit关联的钱包从数百个无关钱包中提取了3,832枚NFT。这是围绕LimitBreak公司Payment Processor V2合约中发现的漏洞所进行的救援行动的首个公开迹象。
该行动最终转移了价值近600万美元的23,155枚NFT，而另一条独立的攻击路径导致660枚WETH未能追回。
白帽行动转移数千枚NFT
当NFT交易者Cirrus报道某钱包从超过100个钱包中清空了3,832枚NFT时，这一事件首次引起关注。Yuga Labs的区块链副总裁Quit随后确认，这些转账属于一次白帽性质的救援行动。
“地址为0x71cF3f5724bD2B72Ef6464992aCd26216DE7fe33的所有资产都是安全的，一旦不再面临风险，它们将被返还。”该研究人员写道。
他们解释说，根本问题出在Payment Processor V2上。美东时间上午9点，一名攻击者利用该漏洞盗取了10枚Meebits、50枚Otherdeeds、10枚World of Women NFT以及235枚Despertae Apewives。
随后，Quit发现许多其他NFT也暴露于相同的漏洞之中。然而，由于V2版本无法暂停，情况变得复杂。LimitBreak公司在接到通知后能够暂停Payment Processor V3，但ApeChain上的V3版本也曾短暂出现无法暂停的情况。
"The only way to protect affected assets is to perform a white hat operation." Quit pointed out.
A total of 23,155 NFTs were successfully rescued, with researchers estimating their value at approximately US$6 million. Owners will regain control of these assets after revoking the flawed authorization.
However, the rescue did not recover all assets affected by the vulnerability. Quit later discovered that the vulnerability could also be reversed to steal WETH, leaving 660 WETH at risk.
He said on the X platform: "Working all night saved about $6 million worth of NFT, but what can't get out of my mind is the $1.7 million WETH because I couldn't stop it from being stolen in time."
Another security incident occurred on the same day
The NFT incident occurred almost simultaneously with the intrusion on the Bitget exchange. Hackers moved more than $351 million from some of their hot money packages and warm wallets, while cold wallets, which store most of the exchange's assets, were unaffected.
Previously, CryptoPotato reported that Bitget CEO Gracy Chen attributed the loss to a breach of the backend system, allowing attackers to forge transaction data rather than stealing the private key. She also said that affected customers will receive compensation and the funds will come from a US$464 million user protection fund established by Bitget.
XRPs constitute the largest single share of stolen cryptocurrencies, with more than 100 million XRPs (worth more than $158 million) scattered among a few wallets.
