Exchange Ranking
Top Exchanges
24h Volume Ranking
Popularity Ranking
Exchange BTC Balance
Proof of Reserves
Decentralized Exchanges
Funding Rate
Funding Heatmap
Liquidation Data
Max Pain
Long/Short Ratio
Whale L/S Ratio
Binance/Okex/Huobi L/S
Bitfinex Margin L/S
ETF Tracker
Solana ETF
XRP ETF
Hong Kong ETF
Bitcoin Treasuries
Crypto Reversal
Ethereum Reserves
HyperLiquid Wallet Analysis
Hyperliquid Whale Watch
Large Transactions
On-chain Movement
Bitcoin ROI
Stablecoin Market Cap
Options Analysis
News
Articles
Economic Calendar
Features
Wallet
Contract Calculator
Security
Collections
Watchlist
Following
BNB 79thVault在BNB Chain上因管理员权限被滥用损失1250万美元，GoPlus介入调查
运行在BNB Chain上的项目79thVault因未授权的特权管理员地址使用事件，遭受了1250万美元的损失。此次事故影响了近万名代币持有者，引发了外界关于该事件是源于黑客攻击还是内部操作的质疑。
GoPlus Security详解管理员权限与资产转移
GoPlus Security对该事件进行了深入分析，发现79AU合约中包含一个保留给OPERATOR_ROLE（操作员角色）的功能，该功能赋予了对资产的极大控制权。由于BscScan上该合约的源代码未经过验证，GoPlus指出该项目呈现出高度集中的控制特征。
OPERATOR_ROLE被分配给了地址0x019bD8ED017D11AF0eB24d28DCdd0f9930c85cA3，这使得持有者能够将79AU代币从任意来源转移到指定的接收方。在事故发生期间，自该管理员地址发起的单小时内发生了七笔特权交易。
值得注意的是，OPERATOR_ROLE并未设置多重签名或多时间锁等安全机制作为防护。这些保护措施的缺失使项目资金面临更高的风险。
GoPlus Security confirmed that the privileged role made seven high-level transfers between 07:25 and 08:19 Coordinated Universal Time (UTC), transferring a total of 2.01 million 79AU tokens to the address 0xc3E90f78A918594a605d584887b2775F4b80A099. The amount of each transfer ranges from 10,000 to 500,000 tokens. This series of quick transfers coincided with a surge in the price of 79AU tokens, and the OPERATOR_ROLE authority was subsequently revoked.
After the asset transfer, these tokens were exchanged for USDT on a decentralized exchange, and subsequently further exchanged for 16,249 BNBs. Most of the funds, approximately US$11.03 million, are still at the address 0xa9537 B40b 02Af7Af 8f1543 aea3691992 B2174F89. Although a small outflow (10 to 15 BNBs each time) was observed, the vast majority of the funds have not yet been moved.
Project response and transparency controversy
After the incident, 79thVault publicly called the incident a "system upgrade" but refused to clarify whether it was caused by the disclosure of operating keys, internal personnel behavior, or other factors. Details of the key leak or a complete dismantling of the damage have not yet been released.
GoPlus Security also pointed to an unusual on-chain communication: a bounty negotiation message from the same administrator address as the exploit. GoPlus said it was unusual to initiate negotiations with attackers from a privileged address and the authenticity of the message was in doubt.
According to GoPlus, the project's limited disclosure of incident details has led to uncertainty as to whether affected users have received sufficient information. The company believes that insider crimes and key leaks are still two reasonable explanations.
市场警惕性提升与模因币趋势
随着加密货币市场在快速创新的同时伴随风险，市场参与者变得更加勤勉，不仅关注价格走势，还密切关注项目运营背后的安全性及资金动向。这种警惕性也延伸到了动态变化的模因币领域。
在模因币市场中，病毒式传播的趋势可以在短时间内产生巨大的交易量。数据显示，在代币“Niu Lai”的一笔交易中，99美元的初始投资膨胀至约37万美元。此类案例凸显了密切跟踪投资者决策和代币发行的重要性。
