Idiphozithi efakwe ku-Tornado Cash kusetshenziswa amasango e-IPFS ngamasango e-IPFS afana nokuthi - ipfs.io, cf-ipfs.com, kanye ne-eth.link - kungenzeka ukuthi isengozini, edalula izimali ezidiphozithi zabasebenzisi engcupheni, ngokusho komthuthukisi we-Tornado Cash 'Gas404 ongaziwa. .'
Abasebenzisi abathintekile baye belulekwa ukuthi bathathe isinyathelo ngokushesha ukuze bavikele imali yabo efakiwe.
Amadiphozithi Womsebenzisi Asengcupheni
Ngokombiko othile iposi blog nge-Gas404, umphakathi uthole okumangazayo mayelana nokuba khona kwekhodi ye-JavaScript enonya, ebifihlwe esiphakamisweni sokuphatha esithunyelwe umthuthukisi we-Tornado Cash owaziwa ngokuthi yi-Butterfly Effects.
Le khodi efihliwe kucatshangwa ukuthi ibivuza amanothi ediphozithi kuseva yangasese elawulwa unjiniyela kusukela ngomhlaka-1 Januwari.
Ngokuphawulekayo, ubungozi bubonakala bukhawulelwe ekusetshenzisweni kwe-IPFS kwe-Tornado Cash, njengoba i-Gas404 isho ukuthi izinguquko kukhodi yomthombo omncane zingacwaningwa kalula ezindaweni zokusebenzelana zendawo.
Ukuze kuncishiswe umonakalo ongase ube khona, okuthunyelwe kutusa abanikazi bethokheni yomdabu ye-Tornado Cash, i-TORN, bavotele i-veto eziphakamisweni ezimbili ezingabazekayo ezasetshenziswa umxhaphazi.
โLokhu kungabala kuphela ekusetshenzisweni kwe-IPFS kwe-Tornado Cash njengoba umthombo oncishisiwe usuphenduke ugibe olufihlekile lomkhohlisi ngakho-ke abantu abaxhumane nenkontileka besebenzisa izixhumanisi zasendaweni bazobhekwa njengabaphephile njengoba izinguquko ezinqumweni zingacwaningwa kalula. โ
Ukuwa kweTornado Cash
I-Tornado Cash ingenye yezixube ze-crypto ezaziwa kakhulu emhlabeni. Ngegalelo elikhulu, ihhovisi loMnyango Wezezimali wase-US Lokulawula Izimpahla Zangaphandle (OFAC) kugunyaziwe I-Tornado Cash ngo-Agasti 2022, ivimbela abantu ngabanye, izakhamuzi, nezinhlangano ngaphakathi kwe-United States ekuhlanganyeleni emisebenzini yezezimali ngenkundla.
UMnyango Wezezimali usola ukuthi umxube we-crypto usize ukutholwa kwemali engaphezu kwezigidigidi eziyisi-7 zamaRandi, okuhlanganisa namaRandi ayizigidi ezingama-455 okukholakala ukuthi antshontshwa ngo-2022 yiLazarus Group, okuyinhlangano edume kabi exhumene nohulumeni waseNyakatho Korea.
Kamuva, isizinda sephrojekthi sathathwa, futhi i-GitHub yasusa inqolobane ye-Tornado Cash ngenkathi imisa okwesikhashana ama-akhawunti onjiniyela, okuholele esikhaleni esivela kubameli bobumfihlo. Inkundla ephethwe yiMicrosoft kamuva kungavinjelwe inhlanganisela yezinhlamvu zemali kanye nabanikelayo.
NgoMeyi odlule, umhlaseli wasebenzisa isiphakamiso esikhohlisayo sokuphuca ukulawula kwe-Tornado Cash's Decentralized Autonomous Organization (DAO). Lesi siphakamiso besiqukethe ikhodi efihliwe enikeza ubunikazi bobugebengu bobugebengu bokukhwabanisa bamathokheni okuvota omgunyathi ngemva kokuvunyelwa yi-DAO.
Kulandela ivoti eliyimpumelelo, isigebengu siqoqe amandla okuvota anele ukuze sisebenzise iziphakamiso zesikhathi esizayo. Ekupheleni kwenyanga, lo mgebengu wayesebonakala efile dedela ukulawula, ngemva kokuguqula ingxenye yamathokheni okubusa antshontshiwe anenani elilinganiselwa ku-$900,000 laba yi-Ether, eyabe ihlanzwa ngesevisi ye-Tornado Cash.
Okunye okwaba nzima, abathuthukisi beTornado ababili abengeziwe, u-Roman Storm no-Roman Semenov, babhekene namacala ahlobene nezinsolo zokubandakanyeka ekuhwebeni imali, okuyisamba esingu-$1 billion. I-Roman Storm yabe isiboshwa eWashington State futhi ucele 'akanacala' emacaleni labekwe wona.
I-Binance Free $100 (Okukhethekile): Sebenzisa lesi sixhumanisi ukubhalisa nokuthola i-$ 100 mahhala kanye ne-10% yesaphulelo semali ku-Binance Futures ngenyanga yokuqala (ngokwemibandela).
- I-SEO Powered Content & PR Distribution. Khuliswa Namuhla.
- I-PlatoData.Network Vertical Generative Ai. Zinike Amandla. Finyelela Lapha.
- I-PlatoAiStream. I-Web3 Intelligence. Ulwazi Lukhulisiwe. Finyelela Lapha.
- I-PlatoESG. Ikhabhoni, I-CleanTech, Amandla, Environment, Ilanga, Ukuphathwa Kwemfucuza. Finyelela Lapha.
- I-PlatoHealth. I-Biotech kanye ne-Clinical Trials Intelligence. Finyelela Lapha.
- Source: https://cryptopotato.com/tornado-cash-vulnerability-developers-flag-deposits-risk-since-january-1st/