嘻哈网络

嘻哈网络公司 | 您的数字资产救援专家。
对抗恶意授权与钓鱼骗局，全力追回被盗、被骗加密资金。
把属于您的资产拿回来。💼🔍

[嘻哈网络 @XiHaNetwork]

因为硬件钱包漏洞，1,082.65BTC（约7020万美元）在7月30日被完全清空。

COLDCARD 官方披露，部分 Mk2、Mk3 设备固件在生成助记词时，错误调用了软件伪随机数生成器，导致助记词的随机性明显下降。

攻击者掌握生成逻辑后，可以枚举可能的随机状态，批量推导钱包地址与链上地址进行匹配批量转移资产。

[Jonathan Goodman 🇨🇦 @itscoachgoodman]

$1.6 million dollars in Bitcoin was drained from my account on July 29th in the Cold Card wallet hack.

My Bitcoin was in cold storage. My keys were on a ColdCard device kept in a safety deposit box that had never been connected to the internet.

This part's nerdy, but here's what happened:

Hackers discovered a vulnerability in the part of the hardware wallet code used to create seed phrases.

This allowed them to use AI to brute force guessing seed phrases.

I was at our cottage and heard about the hack today.

"No way this affects me." I thought.

I logged into Wasabi––software that lets me view my bitcoin wallets online.

Right away I saw lines of red transaction–withdrawals–and I knew.

From 9:36pm - 9:43pm on July 29th, every wallet I had had been emptied.

18.25245043 btc gone. That's just over $1.6 million dollars CAD.

Perhaps the hardest part about this is that I did everything right.

I never shared my seed phrase with anybody. My devices never touched the internet. Everything was kept in multiple safes and safety deposit boxes.

None of it mattered. All because the hardware that created the seed phrase originally had one line in their code from 2021 that had a vulnerability.

I'm filing a police report and a report with the Ontario Securities Commission. But I don't expect to recoup anything.

A part of me is trying to make sense of what just happened. Or try to figure out a lesson in it. I'm struggling. $1.6 million is a staggering amount of money to have stolen.

I guess all that I can think about right now is that I'm so damn happy that I'm an entrepreneur and that my earning potential is under my control. Mark my damn words. I'll recover.

[嘻哈网络 @XiHaNetwork]

BitMart官方说提现还在开放，但已经有很多用户反馈提现卡住，很长时间没有结果。

大部分用户已经按照官方要求走了申请流程，但是提现申请结果有着很多不同，有提100U的，他们基本上会拒绝100U以上的提现，还有对于提现申请直接拒绝的。

#BitMart #资产安全 #交易所

[Justin Xia @xiajingtao]

@sheldonbitmart sheldon总您好，我的260万资金至今无法提现？请问贵平台出问题了吗？

[嘻哈网络 @XiHaNetwork]

BitMEX将于2026年9月23日关闭，提醒大家关注交易所风险。
历史上也有多家大型交易所停运Mt. Gox（2014）
、QuadrigaCX（2019）、FTX（2022），还有今日的发布通告得BitMex。

[BitMEX @BitMEX]

Dear BitMEX Users,

Today, we share with a very heavy heart that BitMEX exchange will shut down its operations, effective 23 September 2026 at 04:00:00 UTC.

The owner and operator of BitMEX, HDR Global Trading Limited, has made the difficult decision to close operations following a strategic review of the business.

It may not look the same today, but we are proud of our 11+ year legacy and the role we played in shaping the crypto industry. We invented the 100x leverage perpetual swap, which for most of you, was the first step to your crypto trading journey. It is now the most traded financial product in the crypto industry, adopted by thousands of users and exchanges. And we remain proud of our robust security infrastructure, which has allowed us to maintain a flawless track record of 0 customer funds lost to hacks in our entire operating history.

We want to reassure you that your assets remain fully safe and under your control during this transition period. This announcement is just to give enough time to ensure a smooth withdrawal process for everyone.

From today we strongly encourage all users to close their positions and withdraw their funds as soon as convenient. For more details on the full process, please read our blog: https://t.co/OOHeh6xHm8

BitMEX was once home to some of the greatest traders today. Our team has dedicated tremendous effort and passion into building the platform into what it is, and we are glad to have reached some of you during your time with us. To everyone who has traded, supported, and grown alongside us - thank you for your trust over the last 11 years.

The BitMEX Team

[嘻哈网络 @XiHaNetwork]

Verus跨链桥在今年五月已经遭受到攻击了，没有修复漏洞，在今天依旧出现了跨链桥攻击问题。

[Blockaid @blockaid_]

🚨 Blockaid detected a @VerusCoin Ethereum Bridge exploit on Ethereum.
An attacker used the bridge import path to trigger unbacked Ethereum-side payouts, draining ~$7.54M in ETH, tBTC, USDC, USDT, EURC, MKR, and scrvUSD from bridge reserves.
More details in 🧵

[嘻哈网络 @XiHaNetwork]

近日Zilliqa合作伙伴交易所冷钱包的ZIL被盗，Zilliqa官方通告暂停交易所中ZIL的交易行为。

[CoinMarketCap @CoinMarketCap]

JUST IN: 🚨 Zilliqa confirmed a cold wallet theft at an unnamed exchange partner and asked exchanges to pause ZIL transfers while it investigates.

[嘻哈网络 @XiHaNetwork]

该文章此前刊载于《刑事技术》期刊，目前已被下架。

[嘻哈网络 @XiHaNetwork]

《虚拟货币取证分析技术及实战应用》该文献主要由
孙胜镔、漏燕娣、程昇、宋瑞坤、计超豪在《刑事与技术》期刊上发布。
主要有三大节虚拟货币的取证分析、虚拟货币追踪、虚拟货币的扣押与冻结。
文章总结了扣押、冻结虚拟货币的常见手段与法律依据，为公安机关办理相关案件提供了技术参考与操作指引。

[吴说区块链 @wublockchain12]

据《南华早报》报道，温州市公安局孙胜斌、浙江省公安厅刑侦总队楼燕迪及其团队于 6 月 4 日在《法医学与技术》期刊上详细阐述了中国执法部门追踪、扣押及冻结非法虚拟资产的技术流程。论文指出，警方针对加密犯罪的取证过程主要分为设备破解、链上追踪与资产冻结三部分：在设备取证方面，警方利用 Meiya Pico、Pinghang 等专业工具进行全盘扫描与智能过滤，从手机备忘录、即时通讯软件及图片识别中检索助记词；在链上追踪方面，警方通过追踪交易手续费回溯至交易平台，并运用跨链分析与混币器时间戳对比等技术手段揭露资金链路；在资产处置方面，通过控制私钥转移至警方多签钱包或协同中心化交易所冻结账户实现扣押。https://t.co/ynPdp3cZNq

[嘻哈网络 @XiHaNetwork]

Allbridge遭受的攻击并非仅此一起，早在2023年4月，该项目也曾发生过安全事件。

[Allbridge @Allbridge_io]

Allbridge Core is experiencing a security incident.
We have paused the protocol as a precaution while we investigate.

If you have liquidity in affected pools, please withdraw now.

The resulting pool imbalance created a temporary positive arbitrage window. If you took advantage of it, please consider returning funds to the address below - this will go directly toward compensating affected LPs.

0x01a494079DCB715f622340301463cE50cd69A4D0

[辰陌Elian @web3chenmo]

Gate官方发文说已经完成了资料收集与事件核实，正协助追踪资金、申报冻结与追回，并敦促当事人报案。说明平台开始积极面对这个事并拉着合规、安全这些部门帮用语解决去向资金紧急冻结这些事了。截至现在，仍无法确认到底是当事人资料泄露、社工攻击、身份核验被绕过，还是平台流程问题。不过作为@Gate_zh来说还是需要向大家公布一些事实，我想这也是大家想看到的，毕竟选择你们平台就是把身家交到你们手里的。

1、身份核验

7月4号、5号两次活体视频原件是否留存，是否做过深伪检测？用的是什么检测能力？活体到底是模型自动审核还是有人工二次复核？模型分、阈值是多少？
新设备苹果14的设备指纹是否首次出现、是否与当事人历史设备明显冲突？如果说冲突却仍放行，本身就是疑点。

2、材料和客服方面

2019 支付宝 C2C 录屏由谁、从什么设备和IP地点提交？解绑手机、重置安全项由谁审核，是自动化还是人工审核？如果是人工审核，是否有记录？客服用什么标准确认提出请求的人是使用账户的本人，是否存在越权或内部账号被利用？

3、���讯及邮箱

当事人称7月5号收到邮箱更换提醒，邮箱到底有没有被更换还是异常登录？手机是否被解绑或补卡劫持，异常短信为什么没触达本人。7月4日变更前后的登录 IP 与地理位置是否异常？

4、风控方面

Gate方面已经说了安全项修改有 2 天等待期，修改成功后还有 24 小时提现保护期，全程约 3 天。但是这次变更主要把所有东西都改了，这种连续重置安全项的、加上陌生新设备、新增免验证地址的多信号叠加为什么没判定为高风险？另外就是短时间 5 笔，约 170 万刀乐提现为何没有一次人工拦截?

5、证据与流程

能否公开原始系统日志，并交第三方安全机构或者司法核验7月7日那笔旧 Mac / passkey 登录被并进同一条时间线，是否被暗��成本人亲自提现？

这么多资金放交易所里面本身也是对平台的信任，也建议当事人@jheioff还是解释下7月5日收到邮箱更换提醒后做了什么？既然收到过异常提醒，为什么没有第一时间冻结账户联系客服改回来？三天里到底登录过没有看过没有?

当事人也积极和平台联系先报案处理，希望后面能看到平台给出一些实际的东西呈现以打消大家的顾虑。

[嘻哈网络 @XiHaNetwork]

@changeygiw 恭喜兄弟解决这个问题🥳

[嘻哈网络 @XiHaNetwork]

SecondFi即使在审计完成后也不会恢复正常运营，后续会建立一个资产回收团队，恢复正常运营的日子会无限期延长。

[EMURGO @emurgo_io]

https://t.co/bTjxCIgt7v

[嘻哈网络 @XiHaNetwork]

secondFi事件最新进展官方已经恢复大部分资产，请认准官方渠道。
并且SecondFi准备了钱包检查器，以便于检查自己的钱包是否受到影响。

[EMURGO @emurgo_io]

https://t.co/Wud0K5WIkG

[嘻哈网络 @XiHaNetwork]

@changeygiw 有官方联系你了，现在还没解决吗😥

[嘻哈网络 @XiHaNetwork]

@abcde21527 碰到了什么问题，我们可以帮忙解决诸多困惑。

[嘻哈网络 @XiHaNetwork]

近期 Humanity Protocol 与 Kelp DAO 的资金��在同一归集节点出现交汇，链上结构显示出明显的聚类特征。
类似路径一旦进入混币或跨链阶段，会被进一步打散，但仍可通过行为模型还原轨迹。嘻哈网络持续跟踪此类资金流动。

图片引用TG/zachxbt的investigations频道

[嘻哈网络 @XiHaNetwork]

@ashgang51 @Polymarket $8 to learn a lesson.😣

[嘻哈网络 @XiHaNetwork]

据ZachXBT侦探警告：我注意到多份报告称，中心化交易所 AscendEX（原名 Bitmax）延迟用户提现数天/数周，甚至完全不处理提现请求。

我查看了 Arkham/TRM 上已知的热钱包，发现其储备金（https://t.co/X8WDOL8LO3）中缺少 ETH、USDT、SOL 等大市值代币，这表明他们可能面临流动性问题。

[EMURGO @emurgo_io]

https://t.co/19PlJ1BTBS

[德尔泰Delta ZH @DeltaCapitalZH]

今日快报