Foundation

<div class="cryptonews">
 <p class="is-style-lead">Phishing group Angel Drainer has started using a new <a rel="noopener noreferrer nofollow" title="attack" href="https://thebittimes.com/tag/attack.html">attack</a> <a rel="noopener noreferrer nofollow" title="vector" href="https://thebittimes.com/tag/vector.html">vector</a>, targeting re<a rel="noopener noreferrer nofollow" title="staking" href="https://thebittimes.com/tag/staking.html">staking</a> <a rel="noopener noreferrer nofollow" title="platform" href="https://thebittimes.com/tag/platform.html">platform</a>s, analysts at Blockaid alarm.</p>
 <p>Blockaid’s analysts have discovered a new attack vector performed by the Angel Drainer group, using a protocol to carry out an approval farming attack via the “queueWithdrawal” function. In an X thread on Feb. 1, Blockaid shared affected wallet addresses, adding it is implementing a fix to safeguard users.</p>
 <figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
  <div class="wp-block-embed__wrapper">
   <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
    <p lang="en" dir="ltr">️ Emerging web3 <a rel="noopener noreferrer nofollow" title="attack" href="https://thebittimes.com/tag/attack.html">attack</a> <a rel="noopener noreferrer nofollow" title="vector" href="https://thebittimes.com/tag/vector.html">vector</a>: Restake Farming ️<br><br>Angel Drainer group has introduced a new <a rel="noopener noreferrer nofollow" title="attack" href="https://thebittimes.com/tag/attack.html">attack</a> <a rel="noopener noreferrer nofollow" title="vector" href="https://thebittimes.com/tag/vector.html">vector</a> utilizing a protocol to execute a novel form of approval farming <a rel="noopener noreferrer nofollow" title="attack" href="https://thebittimes.com/tag/attack.html">attack</a> through the 'queueWithdrawal' mechanism. <br><br>(1/6) pic.twitter.com/sYVu6iCfBh</p>— Blockaid (@blockaid_) February 1, 2024
   </blockquote>
  </div>
 </figure>
 <p>Restaking rewards, introduced by EigenLayer, provide Ethereum (ETH) stakers with new tokens. These tokens can be restaked in other decentralized applications, preserving the option to participate in protocols’ governance.</p>
 <div class="cn-block-related-link">
  <svg class="cn-block-related-link__icon icon" aria-hidden="true"><use xlink:href="#"></use>
  </svg> <span class="cn-block-related-link__prefix"> You might also like: </span> Near Foundation and Eigen Labs partner to enhance Ethereum rollups
 </div>
 <p>In the latest innovative attack, Angel Drainer has apparently made a new approval farming method through the “queueWithdrawal” function of the EigenLayer platform, approving a malicious “withdrawer” to withdraw staking rewards to the attacker’s address, the firm says.</p>
 <blockquote class="wp-block-quote">
  <p>“Unlike the regular ERC20 ‘approve’ method, this is a special kind of approval that is needed due to the nature of Ethereum staking.”</p> <cite>Blockaid</cite>
 </blockquote>
 <p>Blockaid emphasizes that this new attack vector involves a distinctive approval method, leading to most security providers or internal security tools not parsing and validating this approval type. To further elude detection, the attacker employs the so-called “CREATE2” mechanism to approve withdrawals to an empty address, as revealed by Blockaid.</p>
 <p>The firm has notified the EigenLayer team about the “ongoing <a rel="noopener noreferrer nofollow" title="attack" href="https://thebittimes.com/tag/attack.html">attack</a>.” In a separate X post, EigenLayer confirmed the <a rel="noopener noreferrer nofollow" title="attack" href="https://thebittimes.com/tag/attack.html">attack</a>, urging users to stay vigilant amidst the increasing phishing <a rel="noopener noreferrer nofollow" title="attack" href="https://thebittimes.com/tag/attack.html">attack</a>s targeting its users.</p>
 <div class="cn-block-related-link">
  <svg class="cn-block-related-link__icon icon" aria-hidden="true"><use xlink:href="#"></use>
  </svg> <span class="cn-block-related-link__prefix"> Read more: </span> dYdX Foundation partners with Stride to launch liquid staking
 </div> <span class="google-news-banner__label">Follow Us on Google News</span>
</div>
<p>Source: <a rel="noopener noreferrer nofollow" target="_blank" href="https://thebittimes.com/angel-drainer-targets-restaking-platforms-with-new-attack-vector-blokcaid-warns-tbt78489.html">https://thebittimes.com/angel-drainer-targets-restaking-platforms-with-new-attack-vector-blokcaid-warns-tbt78489.html</a></p>

Angel Drainer targets restaking platforms with new attack vector, Blokcaid warns

TheBitTimes

2024년 2월 1일에 게재된 다른 기사

UwU Lend’s Expansion into New Markets with Curve Integration

Celsius Overcomes Chapter 11 Bankruptcy with Unique Strategy

Insightful Analysis of Chiliz (CHZ) Amidst Cryptocurrency Market Volatility

SHIB looks to a better February after losing 14.50% in January

KIP Protocol Closes Strategic Funding Round Led by Animoca Ventures

Argentina will eliminate taxes on crypto assets!

무료 뉴스레터에 가입하여 매일 최신 암호화폐 소식을 받아보세요!