zkLend 被盗了 9.5M 资金,我自己有 40wu 在里面。
zkLend lost $9.5M in a hack. I had 400k USD in it
现在 StarkNet 官方不作为,在被盗 12 小时后仍然放任 L2-L1 的跨链桥的 1800ETH 转出,不禁怀疑是不是监守自盗。
Right now, StarkNet officials are doing nothing. Even 12 hours after the hack, they allowed 1,800 ETH to be transferred out through the L2-L1 bridge. It makes me wonder if this is an inside job.
(https://t.co/K6oN9MJSHf)
黑客的地址内拥有 BN,BitPay,OKX 等多个中心化机构的地址的提现、充币记录。
The hacker's address has multiple withdrawal and deposit records involving centralized platforms like Binance (BN), BitPay, and OKX.
※我们受害群群友准备本周日(2/16)前往香港报警,并同步申请信息公开,线下追查黑客本人。
※Our victim group members are planning to go to Hong Kong to file a police report by this Sunday(Feb 16). We will also request public disclosure of information and conduct offline investigations to track down the hacker.
※有同样大额被盗的请联系我,可以一同前往。不要让事情不了了之。
※If you were also affected, please contact me, and we can go together. We must not let this incident be forgotten.
-------- 附群友分析 --------
------ Victim Group's Analysis ------
在对 zkLend 攻击事件的分析中,发现以下关键线索:
During the analysis of the zkLend attack, we identified the following key leads:
关键地址/Key Address:0x93920786e0FdA8496248C4447e2e082dA69b6C40
Through the attacker's transaction records on StarkNet (0x04d7191dc8eac499bac710dd368706e3ce76c9945da52535de770d06ce7d3b26), we successfully traced this key address (0x93920786e0FdA8496248C4447e2e082dA69b6C40).
Deposit 13.42 STRK from Ethereum, txHash: eth-0x3c2e09a2d6049fcf959002c122b8bdc8a9304b9daf60d3f779efb1e7b99255cd
Withdraw 1.9 ETH to Ethereum, txHash: eth-0x8be118ffbfb72ccca7e7db79ad727ed551e9dea95a3a4d71419404e51ab51b13
该地址在多个 EVM 链上存在频繁交互,涉及的项目包括:
Arbitrum:与 OKX 热钱包、Uniswap、GMX 有交互。
This address has frequent interactions across multiple EVM chains, involving the following projects:
Arbitrum: Interacted with OKX hot wallets, Uniswap, and GMX.
BNB Chain:与 PancakeSwap、Channels Finance 有交互。
BNB Chain: Interacted with PancakeSwap and Channels Finance.
Ethereum Mainnet:与 Across、BitPay、THORChain、https://t.co/kksuf9AGtu 等项目有交互。
Ethereum Mainnet: Interacted with Across, BitPay, THORChain, https://t.co/kksuf9AGtu, and others.
这些交互与资产流动的广泛性,使得该地址成为调查的核心线索。
These extensive interactions and asset movements make this address a key lead in our investigation.
调查建议
Investigation Recommendations
联系相关项目方:与上述提到的项目(如 Uniswap、GMX、PancakeSwap 等)联系,调查该地址的交互记录,特别是用户行为数据(如浏览器指纹、IP 地址等)。
Contact the relevant projects: Reach out to the mentioned platforms (Uniswap, GMX, PancakeSwap, etc.) to investigate the transaction history of this address, particularly user behavior data such as browser fingerprints and IP addresses.
联系交易所:对于与该地址交互的交易所(如 OKX、BitPay 等),调查是否涉及 KYC 用户。
Contact exchanges: Investigate whether the exchanges interacting with this address (such as OKX and BitPay) have any KYC (Know Your Customer) records linked to it.
尽快报警立案:许多调证(如交易所的账户信息、IP 地址、KYC 记录等)需要司法文件才能执行,建议尽快向警方或相关司法机构报案,以便推动调查。
File a police report ASAP: Many key pieces of evidence (such as exchange account details, IP addresses, and KYC records) require legal documents for access. We strongly recommend reporting to the police or relevant judicial authorities as soon as possible to facilitate the investigation.
其他关联地址(参考)
Other Related Addresses (For Reference)
0x34e5DC779cB705200e951239B6A89aaF5C7dBFc1
0xd95b3c1E638Ce3CDc070ad6D4F385c61E2eE8662
0x596a2b9a4EDa4405394Ed8BcfA735b6Bd206bb47 Tornado Cash
0x62b1a03A4D3b68137c407BF207F22933A665Fa10 Ronin Bridge
0xd3D83F33839a7450b11350099Bb311899ffA4204 ChangeNow
0x8bb53B5FA07dA51E65BA5E283EC912BE1e69c359 MEXC
bc1qyajkchc4cgrgpcmmm2massjqrgvrepl28tyjl5 THORChain
bc1qsqwywyfq3dhrmu3kh8emh2l6u5hde7szxpg99j THORChain
@evilcos@SlowMist_Team@0xAA_Science@KuiGas@0xzhaozhao 求转发扩散
📢An exciting benefit on @Uniswap
💰VIP3 pass holders can now get 20% Cashback instantly after trading in Uniswap
Detailed info: https://t.co/VqjOcXeXkA
Freemint VIP3 pass here: https://t.co/ALEGrfn2AY
🎁Bonus for the first 150 users who claimed Uniswap Cashback: extra 30 USDT future Coupon offered by @OfficialApeXdex
#giveaway #uniswap #memecoin #Airdrop
🎁𝗣𝗟𝗔𝗬𝗧𝗘𝗦𝗧𝗜𝗡𝗚 𝗚𝗜𝗩𝗘𝗔𝗪𝗔𝗬 🎁
To celebrate we are giving away 10 playtest spots!
All you have to do is:
🚀Join our Discord community
🚀❤️and 🔁 our last announcement.
🚀Comment your Discord name 👇
You have 72 hours go, go, go! 🏃
🚨𝗣𝗟𝗔𝗬𝗧𝗘𝗦𝗧 𝗦𝗣𝗢𝗧𝗦 𝗡𝗢𝗪 𝗢𝗣𝗘𝗡!🚨
🚀Ascent To The Shards 🚀
Pre-register and join our Discord 📡 for a chance for you and your friends 👥 to play! 🎮
Drop a ❤️and 🔁 if you will heed the call! 🫡
Thank you Emmy for showering me with 2,500 Diamonds and getting me to shamelessly tweet this out. If you're a Solana OG head to https://t.co/WmhEkCSLVx to claim the Diamonds you've earned
Illuvium: Zero is now available for download on Windows, Mac, and Android devices!
If you own an Illuvium Land plot of any tier, you can start playing right now!
If not, you can head to https://t.co/dGGNSHO189 🚀
Note: please allow up to 30m for download to appear.
🎁 Tier 1 @illuviumio Land Giveaway!
In celebration of the Illuvium Zero: Alpha Launch we are giving away ONE piece of land so you can try out the alpha as soon as possible
To enter:
👑 Like/RT this post
👑 Follow @Immutable
👑 Enter w/ the link below
https://t.co/WYUE0DywT8
Want a free Nametag?
We’re giving away 100 right now 👽
1. Create a free profile on https://t.co/XRzqmASuzB 🏷️
2. Reply to this tweet with a link to your profile page 🔗
If we like your reply, we’ll DM you instructions to claim your freebie 💚
🚨 Attention all traders! 🚨
Perps v2 Alpha, the most advanced perps trading experience in DeFi, is live!
Why use a decentralized perps exchange? Check out the blog to find out:
https://t.co/g4cbjj1yl3
What's new in v2? Here's a thread with the highlights:
(1/10) 🧵👇
51% of the blocks in Ethereum are currently being censored (OFAC compliant).
Is Flashbots the enemy? Should we slash all validators that use Flashbots and start afresh with a new set of validators?