https://medium.com/@numencyberlabs/the-private-key-of-qanplatform-was-cracked-by-hackers-causing-1-9-million-losses-8673a54fbb20
QAN平台私钥被黑客破解，损失190万美元！
10月11日，根据链上监测，Numen Cyber labs发现QANplatform跨链桥项目遭到攻击，疑似私钥泄露所致。它造成了大约 190 万美元的损失，QANX 的价格也暴跌了 93%。目前CEX已暂停交易、充提功能。项目组表示，他们已经对攻击前的状态进行了快照，Uniswap 和 Pancakeswap 池中的流动性被撤回。新代币将空投给用户，以减少他们的损失。
众所周知，钱包私钥的安全也是资产安全的重中之重。建议用户妥善保管，不要使用不安全的工具生成钱包地址。接下来，让我们仔细看看这次攻击。
私钥泄露钱包地址：
https://bscscan.com/address/0x68e8198d5b3b3639372358542b92eb997c5c314a
黑客地址：
https://etherscan.io/address/0xf163a6cab228085935fa6c088f9fc242afd4fb11
BSC攻击交易：
https://bscscan.com/tx/0xf93047e41433d73ddf983cfa008aeb356ec89803c0a92b0e97ccdc6c42a13f51
ETH攻击交易 ：
https://etherscan.io/tx/0x048a1a71fd41102c72427cc1d251f4ecbf70558562564306e919f66fd451fe82
攻击分析
2、黑客随后继续使用地址0x68e8198d5b3b3639372358542b92eb997c5c314a在ETH上发起交易，然后调用跨链桥接合约BridgeQANX的bridgeWithdraw函数将1431880339个QANX代币转入钱包地址0xF163A6F2cAB2280859382D.Fa6c
3. 我们分析了两笔交易的细节。两次攻击交易的调用者为钱包地址0x68e8198d5b3b3639372358542b92eb997c5c314a，跨链桥接合约的创建者为同一地址。因此，我们认为本次攻击可能是项目方私钥泄露所致。
4、目前，黑客已经将BSC链的QANX代币兑换成BNB，并通过Tornado.Cash进行转账。目前在黑客地址中的ETH链上还有105,277,9073个代币。
概括
网络上帝实验室 将持续关注本次攻击的资金流向及项目方后续补救措施。也提醒用户和项目方注意保管好自己的钱包私钥和助记词，不要使用不靠谱的工具生成钱包地址，因为它们是打开钱包的钥匙，可能会造成资产的直接损失。
OpenAI's user base has skyrocketed to 800 million, driven by viral features like Ghibli-style image generation, with one million new users joining in just one hour. The company is now valued at $300 billion and is exploring ways to compensate artists for AI-generated content.
WeatherlyNetflix has begun testing the tool with select users in Australia and New Zealand, currently limited to iOS devices. The company says it plans to roll out the feature to additional markets soon, including the US.
CatherineNine Chinese nationals were sentenced for running a fake cryptocurrency scam that tricked over 66,000 people in India out of $6 million. They used fake platforms, social media personas, and money laundering through USDT to hide their crimes.
AnaisKorean Music Copyright Association now requires songwriters to declare that no AI was used when creating songs. If any AI is involved, the song won’t be accepted, and false claims can lead to lost royalties or removal.
WeatherlySome in China’s online community claim Binance founder CZ never served jail time and is tied to the US Fed. He has firmly denied the “absurd” rumours, calling them part of a broader smear campaign. What viral conspiracy will surface next?
CatherineMantra CEO John Mullin has denied insider dumping after OM’s collapse and outlined recovery plans, including possible buybacks.
KikyoSouth Korea has blocked 14 crypto apps on the Apple Store, including KuCoin and MEXC, for operating without local registration. The government says unregistered foreign exchanges face criminal penalties and will continue blocking apps and websites to protect users.
JoyStarting 23 April, Google will require crypto ads to comply with MiCA or CASP licensing, enforcing the policy across all 27 EU member states to strengthen oversight and compliance.
CatherineCanada has approved the world’s first spot Solana ETFs, set to launch on 16 April 2025, offering both direct SOL exposure and staking rewards. Four asset managers will issue the ETFs, giving investors a way to earn passive income while tracking Solana’s price.
WeatherlyMeta will begin training its AI models using EU user data this week, after pausing last year due to privacy concerns. Only public content from adult users will be used, with private messages and data from minors excluded.
Kikyo