2023年1月26日

流行錢包Solana的開發者表示，保護用戶免受惡意攻擊是當務之急。創建一個帳戶來保存你的文章。在最近一次備受矚目的NFT黑客攻擊(這次是針對科技企業家凱文·羅斯)之後，自我保管錢包的安全優勢再次在加密推特上傳播開來。周三，Proof和Moonbirds NFT項目的創建者成為了網絡釣魚攻擊的受害者，騙子向Rose發送了一條消息，利用了他已經在OpenSea市場上授予MetaMask錢包的權限。當這條消息被簽署後，小偷利用這些特權從他的錢包中竊取了超過40個NFT，包括價值近50萬美元的Autoglyphs NFT。一條回應Rose的推文指出，流行的Solana加密貨幣Phantom曾警告其用戶有惡意網站，並屏蔽了誘騙Rose的網站。錢包開發商回答說:“我們支持你。”像MetaMask一樣，Phantom有一個瀏覽器和移動應用程序，用戶可以使用它來購買、購買或發送他們最喜歡的NFT收藏。我們支持你????https://t.co/8ZGPj4o2r6“我們一直在做某些形式的封鎖——最初是通過開源的封鎖列表手動進行的，然後隨著時間的推移變得更加自動化和複雜，”Phantom聯合創始人兼CTO弗朗西斯科·阿戈斯蒂通過直接消息告訴解密。 “You need to keep up with scammers, who are coming up with new strategies all the time, to be effective.” In a blog post on Wednesday, Phantom addressed the issue of phishing and scams, saying that the wallet has scanned over 85 million transactions and blocked over 18,000 wallet-draining transactions. Agosti says Phantom uses manual and automated systems to keep its website blocklist up-to-date, and the company proactively blocks sites it finds suspicious characteristics. Agosti acknowledged that the issue that hit Rose yesterday was that he signed a message, not a transaction. Phantom currently doesn’t scan messages, but Agosti said the company is working on scanning them in a future release. “You don’t have to change any settings; it’s all on by default,” he said. “You probably won’t notice it when using safe dApps , but it activates when you visit a website or try to submit a transaction we think is malicious.” Phishing is one of the most common forms of online attacks. These scams can come via email, social media , or text. On Wednesday, the Twitter account of the Robinhood exchange was compromised by hackers who launched a phishing attack impersonating the popular trading platform. Regardless of the method of transmission, phishing scams ask users to respond in some way, either by replying to a text message or clicking a link that connects the users to a malicious website. And while any device linked to the internet is a potential target, Agosti says the Phantom wallet comes ready. “Phishing is pretty constant—perhaps growing overall as more users enter the space and the opportunity becomes more attractive. In terms of actual scams—that fluctuates. Usually, what happens is that things are fairly stable for a while, and then scammers discover a new strategy that works really well, and then the number of scams spikes as the ecosystem adapts to that new strategy. Kind of like an immune system,” he said. Decrypt reached out to the creators of MetaMask, but has yet to receive a response.