Analysis: The sentry service of Slope Wallet Android V2.2.2 has a private key leak

2022-08-04 10:07 (UTC+8)

慢雾发布对Solana攻击事件的分析，据Solana基金会提供的数据，被盗用户中约60%使用Phantom、约30%使用Slope，其余使用Trust Wallet、Coin98 Wallet等，并且iOS和Android版本的应用都有相应的受害者。在分析Slope Wallet（Android,Version:2.2.2）时，发现其使用了sentry的服务。Sentry是一项广泛使用的服务，在“o7e.slope[.]finance”上运行。Sentry的服务从Slope钱包中收集助记词和私钥等敏感数据，并在创建钱包时将其发送到https://o7e.slope[.]finance/api/4/envelope/，并发现Version:>=2.2.0包中的sentry服务会收集助记词发给“o7e.slope[.]finance”，而Version:2.1.3则没有找到收集助记词或私钥的明显行为。Slope Wallet（Android,>=Version:2.2.0）于2022年6月24日之后发布，所以Slope该日期之后的用户受到影响。对于另外60%的使用Phantom Wallet用户，分析Phantom（版本：22.07.11_65）钱包后发现，Phantom（Android，Version:22.07.11_65）也使用sentry服务收集用户信息，但目前没有发现任何明显的收集助记词或私钥的行为。分析过程中的一些疑问点如下： 1. Sentry的服务收集用户钱包助记词的行为是否属于普遍的安全问题？ 2. Phantom使用了Sentry，那么Phantom钱包会受到影响吗？ 3. 另外60%被盗用户被黑的原因是什么呢？ 4. Sentry作为一个使用非常广泛的服务，会不会是Sentry官方遭遇了入侵？从而导致了定向入侵虚拟货币生态的攻击？

原文链接

最热快讯

2026-09-23 16:11

A whale heavily invested in $4.5 million worth of Robinhood Meme and DeFi leaders has liquidated PONS, incurring a loss of approximately $200,000

Odaily News: According to on-chain analyst Aunt Ai's monitoring, a certain whale sold 5.338 million PONS at an average price of $0.6779, worth $3.67 million, driving the PONS price down 4% from $0.6968 to $0.6688. PONS was previously the largest on-chain asset of this address, with an entry price of approximately $0.7154. This sale resulted in a loss of about $200,000.

2026-09-23 15:56

Former Hack VC partner Hsin-Ju found dead in California at age 37

Odaily News: Crypto industry figure Jordy posted on X platform that former Hack VC partner Hsin-Ju Chuang has been found dead, and expressed condolences. According to a screenshot of a report shared by Jordy, 37-year-old Hsin-Ju Chuang resided in North Las Vegas and was found dead last month near a remote exit off Interstate 15 in the Mojave Desert. Investigators have not yet determined the cause of death.Hsin-Ju previously claimed that she was required to continue working during a medical emergency and was threatened with being blacklisted from the industry if she left before an event was completed. She rejected Hack VC's settlement offer and had planned to publicly release evidence related to her tenure on August 26. Hack VC stated that it has noticed the relevant content, is concerned about Hsin-Ju's health condition, but said that its understanding of the events differs significantly from what Hsin-Ju published, and that it would not publicly discuss details out of privacy considerations.

2026-09-23 15:16

Binance to List OURAUSDT USD-M Pre-IPO Perpetual Contract

Odaily News: According to an official announcement, Binance will list the OURAUSDT USD-M Pre-IPO perpetual contract at 08:30 (UTC) on September 23, 2026, with a maximum leverage of 20x and support for multi-asset mode.

2026-09-23 14:39

Reaching a record high, Hyperliquid's open interest hits $18 billion

Odaily Report: Open interest on Hyperliquid has reached $18 billion, setting a new all-time high.

2026-09-23 13:59

A newly created address bought 269,500 UNI worth $2.84 million

According to Lookonchain monitoring, a newly created address bought 269,500 UNI worth $2.84 million, while another address separately bought 138,400 UNI worth $1.23 million.

2026-09-23 13:59

Hong Kong stock AI application sector continued to decline in the afternoon, with Zhipu dropping over 10%

Odaily News: According to market data, the Hong Kong stock AI application sector continued to decline in the afternoon, with Zhipu falling over 10%, Kingdee International dropping over 7%, and Meitu, MINIMAX-W, and others following the decline.

资讯热榜

日榜

周榜

UBS: Meta's Muse shows broad application prospects, will benefit the AI supply chain

Trump: I believe we will reach a deal with Iran after the U.S. midterm elections

MUBARAK and MARSCOIN rose briefly, with MUBARAK posting a 24H gain of 52%

Anthropic: Claude Sonnet 5.5 and Claude Haiku 5.5 to Be Released in the Coming Weeks

Kalshi requests CFTC to allow margin trading on its platform

Or, affected by the news of Binance's $100 million investment, Circle turned from decline to gain in pre-market trading

Federal Reserve's Collins: Rate hike will help inflation return to target

BTC breaks above 87,000 USDT, up 1.72% in 24H

ZEC briefly broke through 1,650 USDT to hit a new all-time high, up 10% in 24H

Robinhood-listed MONITOR market cap briefly surpassed $13 million, continuing to hit a new all-time high