{"id":17563,"date":"2022-08-04T08:43:00","date_gmt":"2022-08-04T08:43:00","guid":{"rendered":"https:\/\/tr.cointelegraph.com\/news\/slope-wallets-blamed-for-solana-based-wallet-attack"},"modified":"2022-08-04T08:43:00","modified_gmt":"2022-08-04T08:43:00","slug":"solana-cuzdan-hackinden-slope-sorumlu-tutuluyor","status":"publish","type":"post","link":"https:\/\/tr.cointelegraph.com\/news\/slope-wallets-blamed-for-solana-based-wallet-attack","title":{"rendered":"Solana c\u00fczdan hack&#8217;inden Slope sorumlu tutuluyor"},"content":{"rendered":"\n<p style=\"float:right; margin:0 0 10px 15px; width:240px;\"><img src=\"https:\/\/images.cointelegraph.com\/images\/840_aHR0cHM6Ly9zMy5jb2ludGVsZWdyYXBoLmNvbS91cGxvYWRzLzIwMjItMDgvYTgwNzYwNTMtOTgzZC00ZTcwLTkyZGUtNDg5YTg5YTEwNTcwLmpwZw==.jpg\" class=\"type:primaryImage\"><\/p>\n<p>Solana ekosisteminde d\u00fcnden kalan karga\u015fa biraz durulurken, yeni veriler, binlerce Solana kullan\u0131c\u0131s\u0131n\u0131 etkileyen g\u00fcvenlik zafiyetindan b\u00fcy\u00fck oranda\u00a0Slope c\u00fczdan sa\u011flay\u0131c\u0131s\u0131n\u0131n sorumlu oldu\u011funu g\u00f6steriyor.<\/p>\n<p><p>Solana ekosisteminde d\u00fcnden kalan karga\u015fa biraz durulurken, yeni veriler, binlerce Solana kullan\u0131c\u0131s\u0131n\u0131 etkileyen g\u00fcvenlik zafiyetindan b\u00fcy\u00fck oranda\u00a0Slope c\u00fczdan sa\u011flay\u0131c\u0131s\u0131n\u0131n sorumlu oldu\u011funu g\u00f6steriyor.<\/p>\n<p>Slope, Solana layer-1 (L1) blockchain a\u011f\u0131 i\u00e7in bir Web3 c\u00fczdan sa\u011flay\u0131c\u0131s\u0131d\u0131r. Solana Vakf\u0131, d\u00fcn\u00a0Solana Status Twitter hesab\u0131ndan Slope&#8217;a i\u015faret etti ve sald\u0131r\u0131dan etkilenen adreslerin Slope mobil c\u00fczdan uygulamas\u0131nda olu\u015fturuldu\u011funu, buradan i\u00e7eri\u011fi aktar\u0131ld\u0131\u011f\u0131n\u0131 veya bu uygulamalarda kullan\u0131ld\u0131klar\u0131n\u0131 belirtti.<\/p>\n<blockquote class=\"twitter-tweet\">\n<p dir=\"ltr\" lang=\"en\">After an investigation by developers, ecosystem teams, and security auditors, it appears affected addresses were at one point created, imported, or used in Slope mobile wallet applications. 1\/2<\/p>\n<p>\u2014 Solana Status (@SolanaStatus) <a href=\"https:\/\/twitter.com\/SolanaStatus\/status\/1554921396408647680?ref_src=twsrc%5Etfw\" rel=\"noopener noreferrer nofollow\" target=\"_blank\">August 3, 2022<\/a>\n<\/p><\/blockquote>\n<p><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/p>\n<p>Solana Kurucu Orta\u011f\u0131\u00a0Anatoly Yakovenko da ki\u015fisel Twitter hesab\u0131nda siber sald\u0131r\u0131y\u0131\u00a0Slope c\u00fczdanlar ile ili\u015fkilendirdi. Y\u00f6netici, kullan\u0131c\u0131lara Slope hari\u00e7 bir hizmet ile\u00a0en k\u0131sa s\u00fcrede yeniden \u00e7ekirdek \u015fifre olu\u015fturmalar\u0131n\u0131 <a href=\"https:\/\/twitter.com\/aeyakovenko\/status\/1554936705924272130\" rel=\"noopener noreferrer nofollow\" target=\"_blank\">tavsiye etti<\/a>. Y\u00f6neticinin etkilenen kullan\u0131c\u0131lara bir di\u011fer tavsiyesi ise so\u011fuk\/s\u0131cak c\u00fczdan ayr\u0131m\u0131 yapmaya ba\u015flamak oldu.<\/p>\n<blockquote class=\"twitter-tweet\">\n<p dir=\"ltr\" lang=\"en\">Attacker is lazy at driving all the paths. A bunch of phantom users only saw their slope addresses get drained. I would advise anyone that touched slope to regenerate their seed phrase in a different wallet asap.<\/p>\n<p>\u2014 SMS aey.sol, (@aeyakovenko) <a href=\"https:\/\/twitter.com\/aeyakovenko\/status\/1554936705924272130?ref_src=twsrc%5Etfw\" rel=\"noopener noreferrer nofollow\" target=\"_blank\">August 3, 2022<\/a>\n<\/p><\/blockquote>\n<p><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/p>\n<p>Solana tabanl\u0131 c\u00fczdanlar\u0131 etkileyen g\u00fcvenlik zafiyeti, ilk olarak sal\u0131 g\u00fcn\u00fc, topluluk \u00fcyelerinin c\u00fczdanlar\u0131n\u0131n bo\u015falt\u0131ld\u0131\u011f\u0131n\u0131 <a href=\"https:\/\/tr.cointelegraph.com\/news\/ongoing-solana-based-wallet-hack-has-already-seen-millions-drained\" data-amp=\"https:\/\/tr-cointelegraph-com.cdn.ampproject.org\/c\/s\/tr.cointelegraph.com\/news\/ongoing-solana-based-wallet-hack-has-already-seen-millions-drained\/amp\" target=\"_blank\" rel=\"noopener\">rapor etmesiyle<\/a> su y\u00fcz\u00fcne \u00e7\u0131kt\u0131. Sald\u0131r\u0131da neredeyse 8000 c\u00fczdandan yakla\u015f\u0131k 8 milyon dolar de\u011ferinde\u00a0Solana (<a href=\"https:\/\/cointelegraph.com\/solana-price-index\" target=\"_blank\" rel=\"noopener\">SOL<\/a>) ve di\u011fer tokenlerin \u00e7al\u0131nd\u0131\u011f\u0131\u00a0<a href=\"https:\/\/beta-analysis.solscan.io\/public\/dashboard\/ffaf8155-1d6f-4ec7-96db-2e8e8bc5c160\" rel=\"noopener noreferrer nofollow\" target=\"_blank\">tahmin ediliyor<\/a>.<\/p>\n<p>Soru\u015fturma ger\u00e7ekle\u015ftiren Solana\u00a0Vakf\u0131, siber sald\u0131r\u0131da ele ge\u00e7iren c\u00fczdanlardan her birinin \u00f6zel anahtarlar\u0131n\u0131n Slope gibi bir uygulama izleme hizmetine yanl\u0131\u015fl\u0131kla aktar\u0131ld\u0131\u011f\u0131n\u0131 tespit etti.<\/p>\n<p>Vak\u0131f, buna ek olarak sald\u0131r\u0131n\u0131n Solana protokol\u00fcn\u00fc veya kriptografisini riske att\u0131\u011f\u0131na dair herhangi bir delil bulunmad\u0131\u011f\u0131n\u0131 s\u00f6yledi.<\/p>\n<p>Baz\u0131 s\u00f6ylentilere g\u00f6re Slope, kullan\u0131c\u0131lar\u0131n \u00e7ekirdek \u015fifrelerini merkezi sunucular\u0131na kaydetmi\u015f\u00a0<a href=\"https:\/\/twitter.com\/0xfoobar\/status\/1554904067411001346\" rel=\"noopener noreferrer nofollow\" target=\"_blank\">olabilir<\/a>. Bu sunucular da ele ge\u00e7irilmi\u015f ve\u00a0\u00e7ekirdek \u015fifreler s\u0131zd\u0131r\u0131lm\u0131\u015f, b\u00f6ylece hacker&#8217;lar i\u015flemi me\u015fru bir \u015fekilde ger\u00e7ekle\u015ftirmi\u015f\u00a0olabilir.<\/p>\n<p>Siber sald\u0131r\u0131ya ili\u015fkin ilk haberlerde, Slope ve Phantom s\u0131cak c\u00fczdan kullan\u0131c\u0131lar\u0131n\u0131n hedef al\u0131nd\u0131\u011f\u0131\u00a0<a href=\"https:\/\/twitter.com\/0xfoobar\/status\/1554904067411001346\" rel=\"noopener noreferrer nofollow\" target=\"_blank\">s\u00f6yleniyordu<\/a>\u00a0ve \u00e7o\u011fu ki\u015fi, sorunun Solana protokol\u00fcnde olabilece\u011fini d\u00fc\u015f\u00fcnmeye ba\u015flam\u0131\u015ft\u0131. Solana Ileti\u015fim Ba\u015fkan\u0131 Austin Fedora, sonradan payla\u015ft\u0131\u011f\u0131 analizle sorunun yaln\u0131zca s\u0131cak c\u00fczdanlar ile s\u0131n\u0131rl\u0131 oldu\u011funu\u00a0<a href=\"https:\/\/twitter.com\/Austin_Federa\/status\/1554935018094530560\" rel=\"noopener noreferrer nofollow\" target=\"_blank\">aktarm\u0131\u015ft\u0131<\/a>.<\/p>\n<p>Fedora&#8217;ya g\u00f6re sald\u0131r\u0131 ma\u011fdurlar\u0131n\u0131n\u00a0y\u00fczde\u00a060 kadar\u0131n\u0131 Phantom kullan\u0131c\u0131lar\u0131 olu\u015fturuyor. Bu kullan\u0131c\u0131lar\u0131n hi\u00e7biri, \u00e7ekirdek \u015fifrelerini\u00a0Phantom kullanarak olu\u015fturmad\u0131.<\/p>\n<blockquote class=\"twitter-tweet\">\n<p dir=\"ltr\" lang=\"en\">We spun up a Typeform to collect data and the results were clear \u2013 of those drained ~60% were Phantom users and 40% Slope users. But after extensive interviews and requests to the community, we couldn&#8217;t find a single Phantom-forever user who had their wallet drained<\/p>\n<p>\u2014 Austin Federa | sms (@Austin_Federa) <a href=\"https:\/\/twitter.com\/Austin_Federa\/status\/1554935018094530560?ref_src=twsrc%5Etfw\" rel=\"noopener noreferrer nofollow\" target=\"_blank\">August 3, 2022<\/a>\n<\/p><\/blockquote>\n<p><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/p>\n<p>Slope d\u00fcn yapt\u0131\u011f\u0131 a\u00e7\u0131klamada soru\u015fturman\u0131n devam etti\u011fini s\u00f6yledi ve Slope c\u00fczdanlar\u0131ndan personeline ait olanlar dahil bir k\u0131sm\u0131n\u0131n etkilendi\u011fini <a href=\"http:\/\/docs.google.com\/document\/d\/1zdm2KMW2g6JYHsdmSe8zDs56l4NfL-MaQ7nIbV9ohc8\/edit\" target=\"_blank\" rel=\"noopener noreferrer nofollow\">do\u011frulad\u0131<\/a>.<\/p>\n<p>Ekip, kullan\u0131c\u0131lara yeni bir \u00e7ekirdek \u015fifre olu\u015fturmalar\u0131n\u0131 ve varl\u0131klar\u0131n\u0131 yine istismar edilebilecek eski c\u00fczdanlardan ta\u015f\u0131malar\u0131na tavsiye etti. Phantom ekibinin tavsiyesi ise Slope harici yeni bir c\u00fczdana varl\u0131k transferi <a href=\"https:\/\/twitter.com\/phantom\/status\/1554918071306952704\" rel=\"noopener noreferrer nofollow\" target=\"_blank\">oldu<\/a>.<\/p>\n<figure><img loading=\"lazy\" width=\"679\" height=\"753\" src=\"https:\/\/s3.cointelegraph.com\/uploads\/2022-08\/de345e27-4509-4857-998a-2f518ee4de10.PNG\"><\/figure><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Solana ekosisteminde d\u00fcnden kalan karga\u015fa biraz durulurken, yeni veriler, binlerce Solana kullan\u0131c\u0131s\u0131n\u0131 etkileyen g\u00fcvenlik zafiyetindan b\u00fcy\u00fck oranda\u00a0Slope c\u00fczdan sa\u011flay\u0131c\u0131s\u0131n\u0131n sorumlu oldu\u011funu g\u00f6steriyor. Solana ekosisteminde d\u00fcnden kalan karga\u015fa biraz durulurken, yeni veriler, binlerce Solana kullan\u0131c\u0131s\u0131n\u0131 etkileyen g\u00fcvenlik zafiyetindan b\u00fcy\u00fck oranda\u00a0Slope c\u00fczdan sa\u011flay\u0131c\u0131s\u0131n\u0131n sorumlu oldu\u011funu g\u00f6steriyor. Slope, Solana layer-1 (L1) blockchain a\u011f\u0131 i\u00e7in bir Web3 c\u00fczdan sa\u011flay\u0131c\u0131s\u0131d\u0131r.<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[133],"tags":[],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/alb.world\/index.php\/wp-json\/wp\/v2\/posts\/17563"}],"collection":[{"href":"https:\/\/alb.world\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/alb.world\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/alb.world\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/alb.world\/index.php\/wp-json\/wp\/v2\/comments?post=17563"}],"version-history":[{"count":0,"href":"https:\/\/alb.world\/index.php\/wp-json\/wp\/v2\/posts\/17563\/revisions"}],"wp:attachment":[{"href":"https:\/\/alb.world\/index.php\/wp-json\/wp\/v2\/media?parent=17563"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/alb.world\/index.php\/wp-json\/wp\/v2\/categories?post=17563"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/alb.world\/index.php\/wp-json\/wp\/v2\/tags?post=17563"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}