根据 CertiK 提供的安全信息，知名 NFT 白名单平台 Premint 网站周日遭到入侵。据信，这次袭击造成的损失约为 375,000 美元。
今年最大的不可替代代币泄露事件之一是 Premint NFT 平台客户盗窃了至少 314 个区块链条目，总计约 375,000 美元。
据加密安全公司称证书, 该问题始于注入恶意 JavaScript 并影响存储 NFT 的钱包，例如 Bored Ape Yacht Club 和 Oddities。 Premint 发推文说，受影响的用户收到了一个弹出窗口，要求他们确认他们对钱包的所有权。该网站的用户可以注册加入新 NFT 项目的潜在买家数据库。
我们正在积极努力获取资产被盗的完整钱包列表。
这些是 Etherscan 标记为窃取资产的钱包。
–https://t.co/l3yEk2tUDs
–https://t.co/wdo7sJMia1
–https://t.co/8bBEGpKupN
–https://t.co/iY4tna437S— 预测 | NFT 访问列表工具（@PREMINT_NFT）2022 年 7 月 17 日
该消息还说服用户在他们的钱包中启用“SetApprovalForAll”功能，允许黑客从他们的账户中窃取资金。 Premint 声称只有“相对较少的用户”被提示所愚弄，并且它提高了安全性。
SetApprovalForAll 旨在使去中心化金融平台的用户能够立即同意转移特定代币，这些代币已在以后由基础智能合约预先选择。威胁行为者利用该功能将属于其他用户的所有代币转移到他们自己的钱包中。
黑客已被有效关闭，PREMINT 已在撰写本文时更新了他们的网站。
根据 PREMINT 固定在网站上的更新，用户现在可以使用他们的 Twitter 或 Discord 帐户而不是钱包重新登录平台。这是安全且方便得多的方法，尤其是在移动设备上。
BTC/USD 升至 20,000 美元以上。来源：交易视图
相关阅读 |网络犯罪者通过服务器黑客从 Yuga Labs 窃取以太坊和 NFT
该警告由 Permit 团队早些时候在 Twitter 上发布，告诉用户如果他们认为自己的钱包在黑客攻击中受到损害，就撤销对其钱包的访问权限，并且不要批准任何要求他们“为所有人设置批准”的交易。为了修复，该网站暂时下线。
该平台暂时关闭了其网站，并建议使用 Revoke Cash 或 Etherscan 禁用“为所有人设置批准”功能，并将所有资产转移到不同的钱包。通过使用事件报告表，企业可以收集被盗物品的清单并使用它来追踪它们的下落。
该网站在撰写本文时正在运行。由于 Premint 更新，用户不再需要使用钱包登录网站。用户现在可以使用他们的 Twitter 或 Discord 帐户而不是他们的钱包重新登录平台。它更安全，更实用。特别是在手机上。
此外，PREMINT 通知其社区，他们正试图恢复受影响用户的钱包和被盗资产。 “我们正在积极合作，以获得资产被盗的钱包的完整清单。”
自去年以来，NFT 黑客攻击的数量显着增加，而 PREMINT 是最近的受害者。周五早些时候，一名黑客针对NFT 艺术家 DeeKay 的 推特账号。据报道，此次攻击造成 NFT 损失 15 万美元。
由于 NFT 骗局的增加，现在在批准任何交易时格外谨慎比以往任何时候都更加重要。
相关阅读 |黑客的网络钓鱼攻击切断了价值 150 万美元的 Moonbirds NFT
特色图片来自 Getty Images，图表来自 TradingView.com
Lombard aims to enhance Bitcoin's role in DeFi by introducing LBTC, allowing users to stake Bitcoin for yield while retaining liquidity, bridging traditional finance with blockchain innovation. Backed by a $16 million seed round led by Polychain Capital, Lombard plans to integrate LBTC across major DeFi platforms, promising to reshape the DeFi landscape with cross-chain compatibility.
JoySydney Sweeney’s X account was hacked, with now-deleted posts promoting a crypto token bearing her name. The hackers claimed responsibility and hinted at a bigger prey. Who will be the next unlucky star?
KikyoBitDoge, a new meme coin on the Bitcoin network, combines staking, Play-to-Earn gaming, and AI chat features, aiming to blend entertainment with financial opportunities. While showing promising presale success and a detailed roadmap, potential investors should approach with caution due to concerns over the credibility of its audit and the volatile nature of meme coins.
AnaisCairo Finance, an all-in-one DeFi platform with a unique deflationary system, is set to list on three of the top ten centralised exchanges in Q4. Will this spark the next DeFi bull run or will it fall flat?
CatherineKarak, with a $1 billion valuation, aims to revolutionise blockchain security through its restaking platform. However, past allegations of fund misappropriation during its Risk Harbor days cast doubt on its integrity and transparency.
AnaisNintendo President Shuntaro Furukawa announced the company will not use gen AI in their games. Highlighting their wealth of gaming expertise, he emphasized that technology alone cannot replicate value. Is this a dig at major firms?
KikyoCrypto VC funding increased to $3.2 billion in Q2 2024, up 28% from Q1, but still far below the $10 billion peak in Q2 2022. Meanwhile, AI investments surged, reaching $55.6 billion in Q2 2024, driven by major funding rounds.
WeatherlyStarkWare, specialising in cryptographic-proof systems with ZK-STARK technology, recently set a new proving record. Their latest prover claims to be 1000 times better than the current one, with production planned for early 2025.
CatherineRenzo is a restaking protocol built on the Ethereum blockchain. It allows users to easily stake their ETH and earn rewards from EigenLayer. Renzo has a strong founding team and is backed by Binance Labs, but its REZ token has experienced a recent price decline.
WeatherlyScandal-hit Filipina mayor denies espionage claims, faces investigation and party expulsion amid massive fraud allegations.
Alex