{"id":67526,"date":"2026-11-02T19:23:45","date_gmt":"2026-11-02T19:23:45","guid":{"rendered":"https:\/\/cp.snarskis.lt\/index.php\/2026\/11\/02\/isilauzeliai-uzgrobe-12-defi-svetainiu-registruotu-per-name-com-ir-pavoge-apie-138-tukst-doleriu\/"},"modified":"2026-11-02T19:23:45","modified_gmt":"2026-11-02T19:23:45","slug":"isilauzeliai-uzgrobe-12-defi-svetainiu-registruotu-per-name-com-ir-pavoge-apie-138-tukst-doleriu","status":"publish","type":"post","link":"https:\/\/cp.snarskis.lt\/index.php\/2026\/11\/02\/isilauzeliai-uzgrobe-12-defi-svetainiu-registruotu-per-name-com-ir-pavoge-apie-138-tukst-doleriu\/","title":{"rendered":"\u012esilau\u017e\u0117liai u\u017egrob\u0117 12 DeFi svetaini\u0173, registruot\u0173 per Name.com, ir pavog\u0117 apie 138 t\u016bkst. doleri\u0173"},"content":{"rendered":"

\u012esilau\u017e\u0117liai v\u0117l taik\u0117si \u012f kriptovaliut\u0173 sektori\u0173: v\u0117l\u0173 penktadien\u012f u\u017egrob\u0119 daugiau nei tuzin\u0105 DeFi projekt\u0173 svetaini\u0173 jie pasinaudojo jomis tam, kad i\u0161tu\u0161tint\u0173 lankytoj\u0173 kriptovaliut\u0173 pinigines.<\/p>\n

Remiantis vie\u0161ais domen\u0173 registr\u0173 \u012fra\u0161ais, visos 12 u\u017egrobt\u0173 svetaini\u0173 buvo registruotos per t\u0105 pat\u012f registratori\u0173 \u2013 Name.com. Kaip skelbia \u201eThe Block\u201c, pagal blok\u0173 grandin\u0117s duomenis kol kas pavyko atsekti apie 138 000 JAV doleri\u0173 vert\u0117s pavogt\u0173 l\u0117\u0161\u0173.<\/p>\n

Saugumo bendrov\u0117 \u201eBlockaid\u201c nurod\u0117, kad dalis u\u017egrobt\u0173 svetaini\u0173 buvo \u201eu\u017eminuotos\u201c kenk\u0117ji\u0161ku \u012frankiu \u201eStep Drainer\u201c. Tokie vadinamieji \u201edraineriai\u201c apgauna vartotoj\u0105, kad \u0161is pats patvirtint\u0173 operacij\u0105, suteikian\u010di\u0105 u\u017epuolikams teis\u0119 pervesti l\u0117\u0161as i\u0161 prijungtos pinigin\u0117s.<\/p>\n

\u0160e\u0161tadien\u012f 10 i\u0161 \u0161i\u0173 domen\u0173 buvo laikinai sustabdyti registratoriaus lygmeniu \u2013 jiems suteiktas \u201eclient hold\u201c statusas, tod\u0117l adresai kuriam laikui neberesolvinosi. Tarp minim\u0173 projekt\u0173 \u2013 \u201ePickle Finance\u201c, \u201eOrigami Finance\u201c, \u201eFluxBeam\u201c, \u201eEchelon\u201c, \u201eStonkFun\u201c ir \u201eStakePoint\u201c.<\/p>\n

Kaip veik\u0117 ataka ir kas nukent\u0117jo<\/h2>\n

Pasak \u201eBlockaid\u201c, u\u017epuolikai siek\u0117, kad vartotojai, prisijung\u0119 pinigin\u0119 prie svetain\u0117s, patvirtint\u0173 pervedimus \u012f piktavali\u0173 valdomus adresus. Tokiu b\u016bdu l\u0117\u0161os gali b\u016bti i\u0161siurbtos net ir be \u201etikrojo\u201c projekto i\u0161mani\u0173j\u0173 sutar\u010di\u0173 pa\u017eeidimo.<\/p>\n

Patys projektai vie\u0161ai akcentavo, kad j\u0173 onchain sutartys nebuvo paliestos \u2013 ataka daugiausia susijusi su svetaini\u0173 \u201efront-end\u201c dalimi ir domen\u0173\/DNS infrastrukt\u016bra. Vis d\u0117lto tikras nuostoli\u0173 mastas gali b\u016bti didesnis, nes ne vis\u0173 tinkl\u0173 duomenis lengva atsekti vienu b\u016bdu.<\/p>\n

Nukent\u0117jusi\u0173j\u0173 skai\u010dius kol kas ne\u012fvardytas. Ta\u010diau, remiantis vie\u0161ais duomenimis, vien \u201eBNB Chain\u201c tinkle u\u017efiksuota bent keli atvejai, kai atskiri pinigini\u0173 adresai perved\u0117 l\u0117\u0161as u\u017epuolikams.<\/p>\n

\u012etarimai d\u0117l infrastrukt\u016bros: Name.com ir \u201eVercel\u201c<\/h2>\n

Socialiniame tinkle X vartotojai greitai atkreip\u0117 d\u0117mes\u012f \u012f bendr\u0105 vardikl\u012f \u2013 t\u0105 pat\u012f domen\u0173 registratori\u0173. Name.com vie\u0161ai i\u0161 prad\u017ei\u0173 apsiribojo raginimu pildyti piktnaud\u017eiavimo form\u0105, o v\u0117liau parei\u0161k\u0117 identifikavusi neteis\u0117t\u0105 veikl\u0105, kuri es\u0105 nukreip\u0117 dal\u012f per platform\u0105 registruot\u0173 domen\u0173.<\/p>\n

V\u0117lesniame komentare Name.com teig\u0117, kad paveikta buvo 15 klient\u0173 domen\u0173 \u2013 daugiau, nei i\u0161 prad\u017ei\u0173 \u012fvardijo \u201eBlockaid\u201c. Bendrov\u0117 nurod\u0117 atk\u016brusi domenus ir dirbanti ties tyrimu bei papildomu paskyr\u0173 saugumu.<\/p>\n

Tuo metu dalis projekt\u0173 (tarp j\u0173 \u201eKintsu\u201c ir \u201eOrigami Finance\u201c) vie\u0161ai u\u017esimin\u0117 apie galim\u0105 ry\u0161\u012f su debesijos infrastrukt\u016bros bendrove \u201eVercel\u201c, kuri teikia domen\u0173 ir diegimo sprendimus. \u201eVercel\u201c savo saugumo biuletenyje pa\u017eym\u0117jo, kad 10 paveikt\u0173 domen\u0173 buvo susieti su jos platforma, o Name.com juos atk\u016br\u0117 ir abi \u012fmon\u0117s padeda tyrimui.<\/p>\n

K\u0105 tokios atakos rei\u0161kia vartotojams<\/h2>\n

Tokio tipo incidentai primena, kad net ir \u201esaugios\u201c kripto paslaugos gali tapti pavojingos, jei kompromituojamas j\u0173 tinklalapis ar domen\u0173 valdymas. Vartotojui tai da\u017enai atrodo kaip \u012fprastas prisijungimas prie projekto svetain\u0117s, ta\u010diau vienas patvirtinimas pinigin\u0117je gali atverti keli\u0105 l\u0117\u0161\u0173 per\u0117mimui.<\/p>\n

Name.com taip pat ragino klientus per\u017ei\u016br\u0117ti savo DNS \u012fra\u0161us ir \u012fjungti dviej\u0173 veiksni\u0173 autentifikavim\u0105. Pana\u0161ios atakos prie\u0161 kripto projekt\u0173 \u201efront-end\u201c ir DNS infrastrukt\u016br\u0105 yra fiksuotos ir anks\u010diau \u2013 tai viena da\u017eniausi\u0173 schem\u0173, kai siekiama apeiti i\u0161mani\u0173j\u0173 sutar\u010di\u0173 saugumo barjerus per vartotojo patvirtinimus.<\/p>\n","protected":false},"excerpt":{"rendered":"

\u012esilau\u017e\u0117liai u\u017egrob\u0117 12 per Name.com registruot\u0173 DeFi svetaini\u0173 ir, pasitelk\u0119 \u201eStep Drainer\u201c, pavog\u0117 apie 138 t\u016bkst. doleri\u0173 i\u0161 vartotoj\u0173 pinigini\u0173.<\/p>\n","protected":false},"author":0,"featured_media":67527,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[94],"tags":[115,21643,7616,52372,114,16799,52371],"miestas":[],"class_list":["post-67526","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-finansai","tag-bitcoin","tag-blockaid","tag-defi","tag-dns-uzgrobimas","tag-kriptovaliutos","tag-kriptovaliutu-pinigines","tag-name-com"],"acf":[],"_links":{"self":[{"href":"https:\/\/cp.snarskis.lt\/index.php\/wp-json\/wp\/v2\/posts\/67526","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cp.snarskis.lt\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cp.snarskis.lt\/index.php\/wp-json\/wp\/v2\/types\/post"}],"replies":[{"embeddable":true,"href":"https:\/\/cp.snarskis.lt\/index.php\/wp-json\/wp\/v2\/comments?post=67526"}],"version-history":[{"count":0,"href":"https:\/\/cp.snarskis.lt\/index.php\/wp-json\/wp\/v2\/posts\/67526\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cp.snarskis.lt\/index.php\/wp-json\/wp\/v2\/media\/67527"}],"wp:attachment":[{"href":"https:\/\/cp.snarskis.lt\/index.php\/wp-json\/wp\/v2\/media?parent=67526"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cp.snarskis.lt\/index.php\/wp-json\/wp\/v2\/categories?post=67526"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cp.snarskis.lt\/index.php\/wp-json\/wp\/v2\/tags?post=67526"},{"taxonomy":"miestas","embeddable":true,"href":"https:\/\/cp.snarskis.lt\/index.php\/wp-json\/wp\/v2\/miestas?post=67526"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}