TapeOut.linknews

社区成员质疑 DeWEB 前端校验对签名环节无效Community member questions DeWEB front-end checks over signing gap

社区成员 gh0st_node 发文反驳借币安约 63 亿美元被盗事件推广 DeWEB 的说法:他认为这次损失并非前端问题,而是自动签名系统被内部服务绕过,DeWEB 对此无效;若本机已被木马攻破,浏览器内的哈希校验结果和屏幕显示都可被篡改,本机沦陷时没有任何浏览器内检查可信。他还称 Bybit 的教训在于硬件钱包上的“盲签”,真正解法需要在另一台独立设备上解析交易。Community member gh0st_node pushed back on arguments that used Binance's roughly $6.3 billion hack to promote DeWEB: the loss did not come from a front-end problem, but from an automated signing system bypassed by an internal service, against which DeWEB would not have helped. If the local machine is already compromised by malware, both the in-browser hash check and what appears on screen can be altered, so once the host is owned no browser-side verification is trustworthy. The Bybit lesson, the post added, is blind signing on hardware wallets, and the real fix requires parsing the transaction on a separate device.

来源 · 1 条Sources · 1

查看原推文View on X 更多动态 · 新闻频道More updates

评论Comments

    还没有评论,来说两句No comments yet