This incident again involves the exploitation of the durable nonce offline pre-signature mechanism. This phishing technique has been popular for at least two years. After obtaining this signature, attackers can initiate on-chain operations with "legitimate signatures" when the time is right, such as taking over the on-chain admin privileges of Drift in this scenario. This time, it appears to be the work of a professional hacking group (at least in terms of their actions, they were well-prepared and their methods were sophisticated).
This article is machine translated
Show original
Drift
@DriftProtocol
Earlier today, a malicious actor gained unauthorized access to Drift Protocol through a novel attack involving durable nonces, resulting in a rapid takeover of Drift’s Security Council administrative powers.
This was a highly sophisticated operation that appears to have involved
From Twitter
Disclaimer: The content above is only the author's opinion which does not represent any position of Followin, and is not intended as, and shall not be understood or construed as, investment advice from Followin.
Like
Add to Favorites
Comments
Share
Relevant content
