Analysis: The sentry service of Slope Wallet Android V2.2.2 has a private key leak

慢雾发布对Solana攻击事件的分析,据Solana基金会提供的数据,被盗用户中约60%使用Phantom、约30%使用Slope,其余使用Trust Wallet、Coin98 Wallet等,并且iOS和Android版本的应用都有相应的受害者。 在分析Slope Wallet(Android,Version:2.2.2)时,发现其使用了sentry的服务。Sentry是一项广泛使用的服务,在“o7e.slope[.]finance”上运行。Sentry的服务从Slope钱包中收集助记词和私钥等敏感数据,并在创建钱包时将其发送到https://o7e.slope[.]finance/api/4/envelope/,并发现Version:>=2.2.0包中的sentry服务会收集助记词发给“o7e.slope[.]finance”,而Version:2.1.3则没有找到收集助记词或私钥的明显行为。Slope Wallet(Android,>=Version:2.2.0)于2022年6月24日之后发布,所以Slope该日期之后的用户受到影响。 对于另外60%的使用Phantom Wallet用户,分析Phantom(版本:22.07.11_65)钱包后发现,Phantom(Android,Version:22.07.11_65)也使用sentry服务收集用户信息,但目前没有发现任何明显的收集助记词或私钥的行为。 分析过程中的一些疑问点如下: 1. Sentry的服务收集用户钱包助记词的行为是否属于普遍的安全问题? 2. Phantom使用了Sentry,那么Phantom钱包会受到影响吗? 3. 另外60%被盗用户被黑的原因是什么呢? 4. Sentry作为一个使用非常广泛的服务,会不会是Sentry官方遭遇了入侵?从而导致了定向入侵虚拟货币生态的攻击?
最热快讯
Liquidated: A whale's $63.97 million BTC and ETH positions on Hyperliquid were liquidated, with a loss of $10.76 million
Odaily reports that according to Onchain Lens monitoring, a whale's BTC and ETH positions worth $63.97 million on Hyperliquid were liquidated 3 hours ago, resulting in a loss of $10.76 million. Its cumulative liquidation loss stands at $16.13 million, with a lifetime loss of $18.52 million. It currently has no open positions.
Chainlink Reserve buys another 106,300 LINK, bringing total purchases to 6.68 million
Odaily reports that according to Onchain Lens monitoring, Chainlink Reserve added 106,300 LINK today, bringing its cumulative purchases to 6.68 million LINK, valued at approximately $75.06 million. Over the past 30 days, Chainlink Reserve purchased 471,200 LINK, valued at approximately $5.36 million.
33 minutes, 4 liquidations: A Hyperliquid whale loses $972,700 but still holds a $16.16 million BTC long with 40x leverage
According to Onchain Lens monitoring, a whale was liquidated 4 times within 33 minutes, with cumulative losses of $972,700. The whale still holds a BTC long position worth $16.16 million with 40x leverage, a liquidation price of $71,119, just 1.07% away from the current price, an unrealized loss of $609,500, and cumulative losses of $1.01 million.
US Media: Nvidia Faces US Department of Justice Antitrust Investigation
Odaily reports that Nvidia (NVDA.O) is facing an antitrust investigation by the US Department of Justice. (US financial news outlet Semafor)
Foreign media: Nvidia's interim CEO does not lead major company decisions
Odaily reports that Nvidia's (NVDA.O) interim CEO is not the leader of the company's major decisions and is not responsible for setting the company's major decision agenda. (The Information)
Nvidia's decline further narrows to 4.24%
According to MSX.COM data, Nvidia's decline has further narrowed to 4.24%, now trading at $166.35, with its market cap returning above $4 trillion.
资讯热榜
日榜
周榜
US stocks close with AI-related stocks broadly higher, CoreWeave up over 24.71%
US stocks opened with mixed results across the three major indices, with Nvidia plunging 13% at the open
Michael Saylor: Strategy to Bring STRC and MSTR On-Chain, Moving Toward a Never-Closing Capital Market
About 64% of USD1's circulating supply is held on Binance, with no other exchange holding more than 5%
OKX and ICE to Launch 24/7 Tokenized Stock Trading on November 23
Israel Discount Bank to open Bitcoin and Ethereum trading in its app starting November 26
CRWV rose 29.7% in 24 hours
Layoffs and termination of some contractor partnerships, Polymarket confirms restructuring
Rumble sold 198.46 BTC in Q3 and currently holds 94.68 BTC
Wall Street Warns of Nvidia Succession Risk: Stock Could Plunge Over 20% If Huang Renxun Is Forced Out