MistTrack🕵️ (@MistTrack_io) “🔎 MistTrack TrackAgent spotted a notable cross-chain pattern in the movement of” — TopicDigg
MistTrack🕵️
@MistTrack_io
加入 March 2022
0 正在关注 0 粉丝
🔎 MistTrack TrackAgent spotted a notable cross-chain pattern in the movement of funds stolen from Bitget: Using a CoW Protocol + Chainflip combination to automate cross-chain transfers.
The flow:
1) An automated script creates an order on #CoWProtocol#.
2) The order’s recipient is set to a pre-prepared #Chainflip# Deposit Contract address.
3) Once the order is executed, the assets enter Chainflip and are swapped across chains into BTC.
⤵️ One example:
Create Order on CoW Protocol:
Order execution:
Chainflip Deposit Contract:
0xcEAE932A8bEE3a81a681A59890cb26d3110FDb65
Chainflip swap:
Destination BTC address:
bc1qa0rjjhyu9pg3adgpel4v7dct6a8606az863jyh
The interesting part is the automation: rather than manually interacting with each bridge or swap, the attacker can prepare the destination and let the flow execute once the order is filled.
We’ll continue tracking how the stolen funds move across chains and services. 👀
显示更多
我们的 @MistTrack_io TrackAgent 发现朝鲜黑客采用 Cow Protocol + Chainflip 组合跨链操作：Bitget 被盗资金，朝鲜黑客自动化脚本通过 Cow Protocol 创建订单，订单收款地址设置为预先准备好的 Chainflip Deposit 相关合约地址，订单成功后即可完成在 Chainflip 的资产跨链操作，换成 BTC。
如这笔：
在 CoW Protocol 上创建订单：
订单成交：
收款地址（即 Chainflip Deposit Contract）：
0xcEAE932A8bEE3a81a681A59890cb26d3110FDb65
对应 Chainflip 记录：
跨链资产到 BTC 地址：
bc1qa0rjjhyu9pg3adgpel4v7dct6a8606az863jyh
@MistTrack_io @SlowMist_Team
显示更多
