I-Resolv ye-Hack: Iqhosha elinye eliye labeka esichengeni liprintwe njani i-$23M

I-Hack ye-Resolv: Njani iSitshixo esiSesichengeni esishicilelwe kwi-23 yezigidi zeedola

Ilizwe lezezimali ezinatyisiweyo (DeFi) lihamba ngesantya esimangalisayo, lithembisa ukusungula izinto ezintsha kodwa likwagcina imingcipheko enzulu. Iziganeko ezimbalwa zibonisa le dichotomy engcono kune-2023 exploit ye-Resolv, iprotocol ye-DeFi eyenzelwe ukusingatha amabango e-inshurensi. Ngokwaphulwa okumangalisayo, isitshixo esisodwa esithotyiweyo sabucala sakhokelela ekuyilweni okungagunyaziswanga kwe-23 yezigidi zeedola ze-stablecoin yeqonga, ukuthumela ukothuka kuluntu lwe-crypto. Le yayingeyompazamo yekontrakthi entsonkothileyo, kodwa ukusilela okusisiseko kulawulo lofikelelo—isikhumbuzo esicacileyo sokuba kwixesha ledijithali, inqaku elinye lokusilela lingabiza kakhulu.

Inqaku elinye lokuSilela kwiNtlekele

Ngokungafaniyo neeHacks ezintsonkothileyo ezisebenzisa ikhowudi edityanisiweyo, uhlaselo lwe-Resolv lwalulula ngendlela ekhohlakeleyo. Uyilo lweprotocol luquka umsebenzi onelungelo, olawulwa sisitshixo se-cryptographic yangasese, evumela ukudalwa (i-minting) ye-stablecoin yayo, i-eUSD. Xa esi sitshixo siwela kwizandla ezingalunganga, umhlaseli wafumana amandla afana nothixo wokuprinta imali emoyeni omncinci. Baqhubele phambili benza i-870 yezigidi zee-eUSD, betshintsha iinxalenye zayo kwezinye ii-cryptocurrencies kutshintshiselwano olwahlukeneyo. Uxhatshazo lubonise ukuba sesichengeni okubalulekileyo: ukuthembela ngokugqithisileyo kulawulo olusekwe kwindawo engundoqo ngaphakathi kwenkqubo ekucingelwa ukuba yabelwe amagunya. Yayisisitshixo esivulelekileyo esivule ivault yonke.

"I-Resolv exploit yimeko yeklasi yokuhlaselwa 'kwelungelo lokunyuka' kwindawo ye-DeFi. Igxininisa ukuba ukhuseleko lwenkqubo lunamandla kuphela njengekhonkco elibuthathaka kwisakhiwo sayo sokusebenza, esihlala sihlala singabantu okanye inkqubo."

Ngaphaya kweKhowudi: I-Operational Security Void

I-hack igqithise isiphene nje sobugcisa, yaveza isithuba esinzulu sokhuseleko lokusebenza. Kwavela imibuzo ngokukhawuleza: Lagcinwa njani iqhosha labucala? Ngoobani ababenokufikelela kuyo? Ngaba yayingumntu omnye okanye isikim semityikityo emininzi? Isiganeko sibonakalise ukuba ikhowudi yekhontrakthi ehlakaniphileyo ayinantsingiselo ukuba izitshixo zolawulo ezilawula ezo khontrakthi azikhuselwanga ngemigaqo yokusebenza yodidi lomkhosi. Kulapho iziseko zeshishini lemveli zisilela khona iiprojekthi zeWeb3 zanamhlanje. Ukulawula ilungelo elilodwa elilolo hlobo kufuna ngaphezulu komphathi wegama lokugqitha; ifuna imeko elungelelanisiweyo, enokuphicothwa, nenentsebenziswano.

IziFundo eziphambili zeXesha loShishino lweModyuli

I-Hack ye-Resolv, ngelixa ikhethekileyo kwi-DeFi, inikezela ngezifundo jikelele kulo naliphi na ishishini elisebenza kwindawo yedijithali, ngakumbi ezo zakhiwe kwiimodyuli, iinkqubo ezisebenzisanayo. Ifundisa ukuba ukhuseleko kufuneka luphelele, lubandakanye zombini ii-asethi zedijithali kunye neenkqubo zabantu ezibangqongileyo. Amaqonga ale mihla, njengemodyuli ye-OS yoshishino, kufuneka abambelele kwimithetho-siseko yelona lungelo lincinci kunye nokusebenza elubala ukusuka ekuqaleni ukuya phezulu.

• Ulawulo lweNqanaba luPhakamileyo: Imisebenzi ebalulekileyo mayingaze ixhomekeke kwisitshixo esinye. Iinkqubo zokutyikitya ezininzi kunye nezenzo ezitshixekileyo azinangxoxo.
• I-Transparency Creates Accountability: Amanyathelo aphambili, ngakumbi lawo abandakanya iiparameters zemali, kufuneka abonakale kumahlakani agunyazisiweyo kwilog engaguqukiyo.
• Ukumodareyitha Akufuneki Kuthethe Ukwahlulwa: Ukusebenzisa izixhobo ezigqwesileyo ezininzi akufuneki kudala izikhewu zokhuseleko. Kufuneka zidityaniswe kuluhlu oludibeneyo lokusebenza.
• Inkqubo ibaluleke njengeTekhnoloji: Iinkqubo ezicacileyo, eziphindaphindwayo, neziphicothekayo zokulawula ukufikelela zisisiseko sokhuseleko.

Ukwakha kwiSiseko soLawulo oluDityanisiweyo

Apha kulapho iqonga elisebenza ngokudibeneyo libalulekayo. Khawucinge ukuba imisebenzi yolawulo engundoqo ye-Resolv yayingeyona nje isitshixo kwi-laptop, kodwa inkqubo elawulwayo ngaphakathi kwenkqubo efana ne-Mewayz. Imodyuli ye-OS yeshishini inokubonelela ngobume obumiselweyo apho amalungelo aphezulu angagcinwa nje kuphela, kodwa alawulwa. Ngokudibanisa ulawulo lokufikelela, ukuthunyelwa komsebenzi, kunye nokungena kuphicotho-zincwadi kwilaphu lemihla ngemihla, amashishini anokudala iitshekhi kunye neebhalansi ezithintela inqaku elinye lokusilela. I-Mewayz ivumela amaqela ukuba akhe ukuhamba okukhuselekileyo, okucacileyo okujikeleze imisebenzi yabo ebuthathaka, eqinisekisa ukuba imodyuli yobuchule ayizi ngexabiso lokhuseleko. Isifundo esizizigidi ezingama-23 seerandi kwi-Resolv sicacile: kwihlabathi lanamhlanje elinxibeleleneyo loshishino, imfezeko yakho yokusebenza yeyona asethi yakho ixabisekileyo. Ukuyikhusela kufuna ukuhamba ngaphaya kwezixhobo eziqhekekileyo ukuya kwinkqubo eyilelwe ukhuseleko, ulawulo lwentsebenziswano.

Imibuzo Ebuzwa Rhoqo

I-Hack ye-Resolv: Njani iSitshixo esiSesichengeni esiShicilelwe i-$23 yezigidi

Ilizwe lezezimali ezinatyisiweyo (DeFi) lihamba ngesantya esimangalisayo, lithembisa ukusungula izinto ezintsha kodwa likwagcina imingcipheko enzulu. Iziganeko ezimbalwa zibonisa le dichotomy engcono kune-2023 exploit ye-Resolv, iprotocol ye-DeFi eyenzelwe ukusingatha amabango e-inshurensi. Ngokwaphulwa okumangalisayo, isitshixo esisodwa esithotyiweyo sabucala sakhokelela ekuyilweni okungagunyaziswanga kwe-23 yezigidi zeedola ze-stablecoin yeqonga, ukuthumela ukothuka kuluntu lwe-crypto. Le yayingeyompazamo yekontrakthi entsonkothileyo, kodwa ukusilela okusisiseko kulawulo lofikelelo—isikhumbuzo esicacileyo sokuba kwixesha ledijithali, inqaku elinye lokusilela lingabiza kakhulu.

Inqaku elinye lokuSilela kwiNtlekele

Ngokungafaniyo neeHacks ezintsonkothileyo ezisebenzisa ikhowudi edityanisiweyo, uhlaselo lwe-Resolv lwalulula ngendlela ekhohlakeleyo. Uyilo lweprotocol luquka umsebenzi onelungelo, olawulwa sisitshixo se-cryptographic yangasese, evumela ukudalwa (i-minting) ye-stablecoin yayo, i-eUSD. Xa esi sitshixo siwela kwizandla ezingalunganga, umhlaseli wafumana amandla afana nothixo wokuprinta imali emoyeni omncinci. Baqhubele phambili benza i-870 yezigidi zee-eUSD, betshintsha iinxalenye zayo kwezinye ii-cryptocurrencies kutshintshiselwano olwahlukeneyo. Uxhatshazo lubonise ukuba sesichengeni okubalulekileyo: ukuthembela ngokugqithisileyo kulawulo olusekwe kwindawo engundoqo ngaphakathi kwenkqubo ekucingelwa ukuba yabelwe amagunya. Yayisisitshixo esivulelekileyo esivule ivault yonke.

Ngaphaya kweKhowudi: I-Operational Security Void

I-hack igqithise isiphene nje sobugcisa, yaveza isithuba esinzulu sokhuseleko lokusebenza. Kwavela imibuzo ngokukhawuleza: Lagcinwa njani iqhosha labucala? Ngoobani ababenokufikelela kuyo? Ngaba yayingumntu omnye okanye isikim semityikityo emininzi? Isiganeko sibonakalise ukuba ikhowudi yekhontrakthi ehlakaniphileyo ayinantsingiselo ukuba izitshixo zolawulo ezilawula ezo khontrakthi azikhuselwanga ngemigaqo yokusebenza yodidi lomkhosi. Kulapho iziseko zeshishini lemveli zisilela khona iiprojekthi zeWeb3 zanamhlanje. Ukulawula ilungelo elilodwa elilolo hlobo kufuna ngaphezulu komphathi wegama lokugqitha; ifuna imeko elungelelanisiweyo, enokuphicothwa, nenentsebenziswano.

IziFundo eziphambili zeXesha loShishino lweModyuli

I-Hack ye-Resolv, ngelixa ikhethekileyo kwi-DeFi, inikezela ngezifundo jikelele kulo naliphi na ishishini elisebenza kwindawo yedijithali, ngakumbi ezo zakhiwe kwiimodyuli, iinkqubo ezisebenzisanayo. Ifundisa ukuba ukhuseleko kufuneka luphelele, lubandakanye zombini ii-asethi zedijithali kunye neenkqubo zabantu ezibangqongileyo. Amaqonga ale mihla, njengemodyuli ye-OS yoshishino, kufuneka abambelele kwimithetho-siseko yelona lungelo lincinci kunye nokusebenza elubala ukusuka ekuqaleni ukuya phezulu.

Ukwakha kwiSiseko soLawulo oluDityanisiweyo

Apha kulapho iqonga elisebenza ngokudibeneyo libalulekayo. Khawucinge ukuba imisebenzi yolawulo engundoqo ye-Resolv yayingeyona nje isitshixo kwi-laptop, kodwa inkqubo elawulwayo ngaphakathi kwenkqubo efana ne-Mewayz. Imodyuli ye-OS yeshishini inokubonelela ngobume obumiselweyo apho amalungelo aphezulu angagcinwa nje kuphela, kodwa alawulwa. Ngokudibanisa ulawulo lokufikelela, ukuthunyelwa komsebenzi, kunye nokungena kuphicotho-zincwadi kwilaphu lemihla ngemihla, amashishini anokudala iitshekhi kunye neebhalansi ezithintela inqaku elinye lokusilela. I-Mewayz ivumela amaqela ukuba akhe ukuhamba okukhuselekileyo, okucacileyo okujikeleze imisebenzi yabo ebuthathaka, eqinisekisa ukuba imodyuli yobuchule ayizi ngexabiso lokhuseleko. Isifundo esizizigidi ezingama-23 seerandi kwi-Resolv sicacile: kwihlabathi lanamhlanje elinxibeleleneyo loshishino, imfezeko yakho yokusebenza yeyona asethi yakho ixabisekileyo. Ukuyikhusela kufuna ukuhamba ngaphaya kwezixhobo eziqhekekileyo ukuya kwinkqubo eyilelwe ukhuseleko, ulawulo lwentsebenziswano.