Analysis: The sentry service of Slope Wallet Android V2.2.2 has a private key leak

慢雾发布对Solana攻击事件的分析,据Solana基金会提供的数据,被盗用户中约60%使用Phantom、约30%使用Slope,其余使用Trust Wallet、Coin98 Wallet等,并且iOS和Android版本的应用都有相应的受害者。 在分析Slope Wallet(Android,Version:2.2.2)时,发现其使用了sentry的服务。Sentry是一项广泛使用的服务,在“o7e.slope[.]finance”上运行。Sentry的服务从Slope钱包中收集助记词和私钥等敏感数据,并在创建钱包时将其发送到https://o7e.slope[.]finance/api/4/envelope/,并发现Version:>=2.2.0包中的sentry服务会收集助记词发给“o7e.slope[.]finance”,而Version:2.1.3则没有找到收集助记词或私钥的明显行为。Slope Wallet(Android,>=Version:2.2.0)于2022年6月24日之后发布,所以Slope该日期之后的用户受到影响。 对于另外60%的使用Phantom Wallet用户,分析Phantom(版本:22.07.11_65)钱包后发现,Phantom(Android,Version:22.07.11_65)也使用sentry服务收集用户信息,但目前没有发现任何明显的收集助记词或私钥的行为。 分析过程中的一些疑问点如下: 1. Sentry的服务收集用户钱包助记词的行为是否属于普遍的安全问题? 2. Phantom使用了Sentry,那么Phantom钱包会受到影响吗? 3. 另外60%被盗用户被黑的原因是什么呢? 4. Sentry作为一个使用非常广泛的服务,会不会是Sentry官方遭遇了入侵?从而导致了定向入侵虚拟货币生态的攻击?
最热快讯
Bank of America: A Fed Rate Hike in October Would Be the Biggest Bullish Catalyst for US Stocks
Odaily News: While equity investors around the world are still steering clear of the word "rate hike," Bank of America strategist Michael Hartnett has put forward a counterintuitive judgment: if the Federal Reserve chooses to proactively raise rates in October, it would not be a negative, but could instead become the biggest bullish catalyst supporting risk assets and underpinning US stocks.In Hartnett's view, against the current backdrop, if the Fed remains on hold for too long, bond investors will continue to demand higher term premiums, pushing long-end yields further up and ultimately forcing financial conditions to tighten on their own. Conversely, if the Fed proactively raises rates at its October meeting, sending a hawkish signal to curb inflation risks ahead of time, long-end yields could instead stabilize. In that case, the short-term shock from a rate hike may prove less damaging than the greater harm caused by disorderly bond market volatility. (CLS)
Pre-market U.S. Stock News Roundup: Nvidia Launches New Pluggable Optical Module, Three Major Stock Index Futures Show Divergence
Odaily News: Before the U.S. stock market opens, the key market and financial news investors should focus on is as follows:1. The three major U.S. stock index futures showed divergence. Dow Jones Index futures rose 0.95%, S&P 500 Index futures fell 0.03%, and Nasdaq 100 Index futures fell 0.75%.2. International oil prices fell across the board. WTI crude oil futures fell 1.78% to $92.068 per barrel; Brent crude oil futures fell 1.99% to $104.532 per barrel.3. International spot gold and silver fluctuated within a narrow range. Spot gold rose 0.28% to $4,183.29 per ounce; spot silver fell 0.22% to $60.15 per ounce.4. Most of Europe's three major stock indices rose. The UK FTSE 100 Index rose 0.51%, the French CAC40 Index fell 0.08%, and the German DAX30 Index rose 0.10%.5. AMD CEO Su Zifeng expressed strong confidence in the outlook for the CPU market and designated 2026 as the "year of inference." She expects that, driven by agentic AI workloads, the CPU market size will achieve explosive growth in the coming years.6. Applied Materials (AMAT), the largest U.S. semiconductor equipment manufacturer, expects its revenue to double in the coming years. The company is also using AI tools to drive innovation and product R&D, exploring ways to improve semiconductor yield rates.7. Marvell Technology announced the launch of its second-generation Structera X 3406 and 3506 CXL memory expanders, aimed at AI inference applications. The new products are the industry's first six-channel CXL 3.2 memory expanders, with a single controller supporting up to 9TB DDR4 or 6TB DDR5 memory.8. Nvidia and Cisco jointly launched a new ultra-dense small pluggable module (USFP). USFP is the first module to support 400Gb/s electrical signals per channel, with a single module capacity of up to 12.8Tb/s, suitable for next-generation AI factories.9. Samsung Electronics jointly demonstrated a memory expansion solution based on Compute Express Link (CXL) with AMD at the 2026 OCP Global Summit. Samsung also exhibited customized HBM and the new HBM5, as well as compute-in-memory technology.10. Streaming giant Netflix obtained exclusive broadcasting rights for the 2030 FIFA World Cup in Spain and Andorra. Boosted by this, Netflix rose more than 1% in pre-market trading.11. Federal Reserve Governor Waller said that rising U.S. Treasury yields are having a tightening effect on policy and helping to curb demand in some areas of the economy. He also said that hyperscale companies still plan to invest trillions of dollars over the next three years.12. A Bank of America survey showed that investors' allocation to tech stocks has reached its highest level since 2020, and global semiconductor stocks have become the market's "most crowded" trade.
Ledger: Has coordinated with MediaMarkt Saturn to suspend hardware wallet sales
Odaily reports: Hardware wallet manufacturer Ledger posted on X platform stating that it has coordinated with German electronics retailer MediaMarktSaturn Retail Group to suspend sales of Ledger devices in its stores and online channels starting October 13, in order to investigate a device tampering incident previously reported by a German user.Ledger stated that no user fund losses have been found resulting from this incident, and there is no evidence that Ledger's infrastructure, systems, or services have been compromised. The company's customer service team is reviewing user feedback, and its cybersecurity team Donjon will conduct further inspection of suspicious devices received.Ledger also stated that some related claims and loss data circulating online have not been verified, and users should only obtain follow-up information through official Ledger and MediaMarkt Saturn channels. Previously, the market had reported that some Ledger devices were suspected of supply chain tampering, which raised concerns about hardware wallet security.
Cipher Digital Plans to Issue $850 Million in Convertible Bonds to Expand AI Data Center Buildout
Odaily reports: Nasdaq-listed company Cipher Digital plans to raise funds for its Barber Lake project and high-performance computing (HPC) data center business expansion through the issuance of $850 million in zero-coupon convertible bonds.Cipher Digital stated that the private placement could be expanded to up to $1 billion, with an additional $150 million in bonds to be issued if the initial purchasers exercise their option to purchase additional notes. Meanwhile, the company plans to convert some of its 1.75% convertible bonds due in 2030 into common stock.The company had previously adjusted the planning for its Barber Lake data center project in Colorado City, Texas, signing agreements with Fluidstack and an undisclosed AI lab to extend the project contract term from 10 years to 20 years, with expected contract revenue increasing from $3.8 billion to over $9 billion. (Theenergymag)
BlackRock ETF-linked wallet deposits $203 million in Bitcoin and Ethereum to Coinbase Prime in 1 hour
According to Onchain Lens monitoring, a BlackRock ETF-linked wallet transferred $203 million worth of Bitcoin and Ethereum to Coinbase Prime in the past hour, including 860.393 BTC valued at $71.54 million and 52,488 ETH valued at $131 million.
US ADP employment weekly change for the week ending September 26: 24,750, previous value: 23,750
Odaily reports that the US ADP employment weekly change for the week ending September 26 was 24,750, compared to the previous value of 23,750. (Jinshi)
资讯热榜
日榜
周榜
BTC breaks through 84,000 USDT, 24H gain 0.01%
South Korean stock index plunges, exchange activates sidecar mechanism for KOSPI index
Goldman Sachs: $1.7 Trillion Buyback Wave Will Buffer the Impact of Surging Equity Supply
US media: OpenAI reportedly plans to "revive" Sora
Binance Pool and related services will be discontinued on November 10, 2026
US memory chip stocks extend declines: SanDisk down 6.74%, Micron Technology down over 4%
Macquarie: Accelerating US September CPI Unlikely to Prompt a Fed Rate Hike in October
Korean stocks close down 5.4%, SK Hynix plunges 10%
KB Securities: South Korean Chip Stocks Pullback May Reflect Investors' Doubts About Earnings Sustainability
South Korea's KOSPI index extends decline to over 4%