与「SlowMist」相关的搜索结果

🚨 SlowMist TI Alert 🚨 After receiving user reports of stolen funds, we looked into @PennysiaLabs. The Settlement contract on Ethereum was exploited through an arbitrary external call, which let the attacker spend users’ leftover token approvals. 🔧 ⚠️ Anyone who ever approved tokens to the Settlement contract should revoke now 👇 0x3aad97e5a91b8e43b7dc830aceb004307678795e Attacker: 0x813a5ab666adeba907548235fbac087642878300 Attack tx:

1/ 🛡️ Compliance can’t pause. SlowMist offers free trials and dedicated technical support to help businesses maintain their on-chain risk screening and compliance workflows, while exploring alternative or complementary #KYT# solutions. 👇 🧵

把 SlowMist Agent Security Skill 扔给 DeepSeek Harness，用“创造模式”： 参考 编写一个适合 DSH 的安全插件。 然后按你对安全的理解，对话几轮，一个适配该 Agent 的安全插件就出来了。

One letter. $20K gone. We broke down how Punycode phishing makes fake crypto sites look almost real — including a case flagged by @SlowMist_Team involving a fake ChangeNOW domain. See how to spot a trick. Read the full article on ChangeNOW blog 👇

真没想到，Bitget @Bitget_zh 本次被盗 $3.875亿，入口居然是它花钱买的第三方安全设备？ SlowMist 和 Mandiant 的结论：黑客先拿下Bitget 用的两台第三方安全设备，其中一台靠零日漏洞，再从设备横向摸进生产环境的钱包服务器，伪造交易数据。审批流程看着一切正常，钱就自动放出去了。 最早的恶意痕迹在 8 月 31 号，，9 月 25 号凌晨才动手搬钱，潜伏了三周多。 这些黑客真勾八NB，怎么做到的？又是朝鲜金将军干的？ 不过好在本次Bitget被盗资金由保护基金兜底，问题不大。

Our Asset Inheritance feature has passed a security audit by @SlowMist_Team. The audit identified no critical or high-risk vulnerabilities, and all findings were acknowledged. View the full report:

@bitget has engaged SlowMist’s security team to investigate the September 25 hot wallet asset theft. As of September 29, our investigation has identified malicious activity involving certain third-party security products and a wallet application host, as well as a highly customized withdrawal tool used by the attacker. 🔎 Key findings include: 1. Malicious activity on a certain third-party product involving exploitation of a zero-day vulnerability. 2. Unauthorized access to a certain third-party products management platform on September 25 using an internal employee identity. 3. Recovery of a customized withdrawal tool designed to interact with the wallet system’s withdrawal logic. 4. On-chain activity begins at 02:31 on September 25, with transfers across multiple blockchains over approximately 2 hours and 52 minutes. 5. Subsequent attempts to manipulate withdrawal records and trigger additional BTC withdrawals. We are continuing to investigate how the attacker moved between the affected systems. All date references are to UTC+8. 📄 Read the details of the investigation:

MistTrack: Bitget Exploiter Attempted to Route Stolen Funds via Chainflip but Broker Rejected According to on-chain monitoring by SlowMist's tracking arm MistTrack, the Bitget exploiter attempted to move stolen funds through the cross-chain liquidity protocol Chainflip, but the transaction was rejected at the broker interface ("deposit rejected by the broker"). The protocol did not freeze the capital but instead refunded the deposit directly back to the sender, effectively preventing the attacker from routing the exploit proceeds through the network.

On chain investigation made simple by MistTrack Agent powered by @SlowMist_Team available now on @FinchTechCN Drop a wallet address or tx hash into MistTrack Agent and let it trace fund flows, map connections, and flag potential risks in seconds.

继9月24日发现安全事件后，Bitget 将开始分阶段有序恢复提现功能。 此次事件所涉及的漏洞已被查明并完成修复。 Bitget 的安全与技术团队一直在对提现基础设施开展进一步的验证与安全核查，独立网络安全专家 Mandiant 与慢雾（SlowMist）也持续为调查工作提供支持。 提现功能的暂时暂停仍属于安全防范措施，与用户资产的可用性无关。用户账户余额未受任何影响，Bitget 用户保护基金（Protection Fund）将用于覆盖本次平台级事件所造成的资金影响。 安全核查完成后，提现功能将有序恢复。 当前的提现恢复时间安排如下： 9月28日08:00（UTC）：BTC（Bitcoin 网络） 9月29日08:00（UTC）：ETH（Ethereum、BSC、Arbitrum、Base、Optimism） 9月30日08:00（UTC）：USDT（Ethereum、BSC、Solana、Tron） 10月2日08:00（UTC）：其他代币/法币/C2C 我们的目标是尽快、安全地恢复所有支持资产及网络的提现服务。 该事件持续处于受控状态，不会再发生新的未经授权转账。在此过程中，用户资金始终不受影响。交易与充值功能持续正常运行。 用户在提现功能逐步开放前无需采取任何操作。提现功能的开放情况将直接在 Bitget 平台上显示，建议用户关注 Bitget 官方渠道以获取最新进展。