{"id":1274,"date":"2024-06-19T18:55:19","date_gmt":"2024-06-19T18:55:19","guid":{"rendered":"https:\/\/bitcoinnewscrypto.com\/vi\/?p=1274"},"modified":"2024-06-19T18:55:23","modified_gmt":"2024-06-19T18:55:23","slug":"kraken-bug-exploit-3-million-fixed","status":"publish","type":"post","link":"https:\/\/bitcoinnewscrypto.com\/vi\/uncategorized\/kraken-bug-exploit-3-million-fixed\/","title":{"rendered":"Kraken m\u1ea5t g\u1ea7n 3 tri\u1ec7u \u0111\u00f4 la v\u00ec l\u1ed7i cho ph\u00e9p g\u1eedi ti\u1ec1n \u1ea3o m\u00e0 kh\u00f4ng c\u1ea7n ho\u00e0n t\u1ea5t giao d\u1ecbch"},"content":{"rendered":"<h3 class=\"wp-block-heading\">Kraken ch\u1ecbu thi\u1ec7t h\u1ea1i g\u1ea7n 3 tri\u1ec7u \u0111\u00f4 la do l\u1ed7i h\u1ec7 th\u1ed1ng<\/h3>\n\n<p>Kraken, m\u1ed9t s\u00e0n giao d\u1ecbch ti\u1ec1n m\u00e3 h\u00f3a n\u1ed5i ti\u1ebfng, m\u1edbi \u0111\u00e2y \u0111\u00e3 ti\u1ebft l\u1ed9 v\u1ec1 m\u1ed9t l\u1ed7i h\u1ec7 th\u1ed1ng cho ph\u00e9p m\u1ecdi ng\u01b0\u1eddi g\u1eedi ti\u1ec1n v\u00e0o t\u00e0i kho\u1ea3n c\u1ee7a h\u1ecd m\u00e0 kh\u00f4ng c\u1ea7n th\u1ef1c hi\u1ec7n giao d\u1ecbch g\u1eedi ti\u1ec1n. L\u1ed7i n\u00e0y \u0111\u00e3 b\u1ecb khai th\u00e1c \u0111\u1ec3 l\u1ea5y tr\u1ed9m g\u1ea7n 3 tri\u1ec7u \u0111\u00f4 la t\u1eeb kho b\u1ea1c c\u1ee7a Kraken tr\u01b0\u1edbc khi \u0111\u01b0\u1ee3c kh\u1eafc ph\u1ee5c. Gi\u00e1m \u0111\u1ed1c An ninh th\u00f4ng tin (CSO) c\u1ee7a Kraken \u0111\u00e3 chia s\u1ebb th\u00f4ng tin chi ti\u1ebft v\u1ec1 s\u1ef1 c\u1ed1 n\u00e0y.<\/p>\n\n<h3 class=\"wp-block-heading\">Ph\u00e1t hi\u1ec7n ra l\u1ed7i<\/h3>\n\n<p>V\u00e0o ng\u00e0y 9 th\u00e1ng 6, ch\u01b0\u01a1ng tr\u00ecnh ti\u1ec1n th\u01b0\u1edfng d\u00e0nh cho ng\u01b0\u1eddi t\u00ecm ra l\u1ed7i c\u1ee7a Kraken \u0111\u00e3 nh\u1eadn \u0111\u01b0\u1ee3c c\u1ea3nh b\u00e1o v\u1ec1 m\u1ed9t l\u1ed7i &#8220;c\u1ef1c k\u1ef3 nghi\u00eam tr\u1ecdng&#8221;. C\u1ea3nh b\u00e1o n\u00e0y \u0111\u01b0\u1ee3c g\u1eedi b\u1edfi m\u1ed9t nh\u00e0 nghi\u00ean c\u1ee9u b\u1ea3o m\u1eadt \u0111\u00e3 ph\u00e1t hi\u1ec7n ra m\u1ed9t l\u1ed7 h\u1ed5ng nghi\u00eam tr\u1ecdng. Theo CSO Nick Percoco c\u1ee7a Kraken, l\u1ed7i n\u00e0y cho ph\u00e9p ai \u0111\u00f3 th\u1ed5i ph\u1ed3ng s\u1ed1 d\u01b0 t\u00e0i kho\u1ea3n c\u1ee7a m\u00ecnh m\u1ed9t c\u00e1ch gi\u1ea3 t\u1ea1o. \u0110i\u1ec1u n\u00e0y c\u00f3 ngh\u0129a l\u00e0 h\u1ecd c\u00f3 th\u1ec3 b\u1eaft \u0111\u1ea7u g\u1eedi ti\u1ec1n v\u00e0 nh\u1eadn ti\u1ec1n m\u00e0 kh\u00f4ng c\u1ea7n ho\u00e0n t\u1ea5t quy tr\u00ecnh g\u1eedi ti\u1ec1n.<\/p>\n\n<h3 class=\"wp-block-heading\">L\u1ed7i ho\u1ea1t \u0111\u1ed9ng nh\u01b0 th\u1ebf n\u00e0o<\/h3>\n\n<p>L\u1ed7i n\u00e0y l\u00e0 do m\u1ed9t thay \u0111\u1ed5i g\u1ea7n \u0111\u00e2y trong thi\u1ebft k\u1ebf Tr\u1ea3i nghi\u1ec7m ng\u01b0\u1eddi d\u00f9ng (UX) c\u1ee7a n\u1ec1n t\u1ea3ng Kraken. L\u1ed7 h\u1ed5ng n\u00e0y gi\u00fap c\u00e1c t\u00e0i kho\u1ea3n \u0111\u01b0\u1ee3c ghi c\u00f3 tr\u01b0\u1edbc khi ti\u1ec1n g\u1eedi t\u00e0i s\u1ea3n \u0111\u01b0\u1ee3c x\u00f3a ho\u00e0n to\u00e0n. \u0110i\u1ec1u n\u00e0y cho ph\u00e9p nh\u1eefng k\u1ebb t\u1ea5n c\u00f4ng c\u00f3 th\u1ec3 &#8220;in ti\u1ec1n&#8221; t\u1ea1m th\u1eddi v\u00e0o t\u00e0i kho\u1ea3n c\u1ee7a h\u1ecd. Tuy nhi\u00ean, Percoco kh\u1eb3ng \u0111\u1ecbnh r\u1eb1ng kh\u00f4ng c\u00f3 t\u00e0i s\u1ea3n n\u00e0o c\u1ee7a kh\u00e1ch h\u00e0ng b\u1ecb \u0111e d\u1ecda, v\u1ea5n \u0111\u1ec1 n\u1eb1m \u1edf ngu\u1ed3n ti\u1ec1n c\u1ee7a ch\u00ednh Kraken.<\/p>\n\n<h3 class=\"wp-block-heading\">Khai th\u00e1c tr\u01b0\u1edbc khi s\u1eeda l\u1ed7i<\/h3>\n\n<p>Kraken \u0111\u00e3 nhanh ch\u00f3ng s\u1eeda l\u1ed7i trong v\u00f2ng v\u00e0i gi\u1edd sau khi nh\u1eadn \u0111\u01b0\u1ee3c c\u1ea3nh b\u00e1o. Tuy nhi\u00ean, m\u1ed9t cu\u1ed9c \u0111i\u1ec1u tra \u0111\u00e3 ti\u1ebft l\u1ed9 r\u1eb1ng c\u00f3 ba t\u00e0i kho\u1ea3n \u0111\u00e3 khai th\u00e1c l\u1ed7i n\u00e0y ch\u1ec9 trong v\u00f2ng v\u00e0i ng\u00e0y. M\u1ed9t trong nh\u1eefng t\u00e0i kho\u1ea3n n\u00e0y thu\u1ed9c v\u1ec1 nh\u00e0 nghi\u00ean c\u1ee9u b\u1ea3o m\u1eadt \u0111\u00e3 t\u00ecm ra l\u1ed7i. Ng\u01b0\u1eddi n\u00e0y \u0111\u00e3 d\u00f9ng t\u00e0i kho\u1ea3n v\u1edbi s\u1ed1 ti\u1ec1n 4 \u0111\u00f4 la \u0111\u1ec3 ki\u1ec3m tra l\u1ed7i. Sau \u0111\u00f3, h\u1ecd \u0111\u00e3 n\u1ed9p b\u00e1o c\u00e1o ti\u1ec1n th\u01b0\u1edfng d\u00e0nh cho ng\u01b0\u1eddi t\u00ecm ra l\u1ed7i v\u00e0 y\u00eau c\u1ea7u tr\u1ea3 th\u01b0\u1edfng.<\/p>\n\n<h3 class=\"wp-block-heading\">Nh\u1eefng c\u1ed9ng s\u1ef1 khai th\u00e1c l\u1ed7i v\u1edbi m\u1ee9c \u0111\u1ed9 l\u1edbn h\u01a1n<\/h3>\n\n<p>T\u00ecnh h\u00ecnh tr\u1edf n\u00ean nghi\u00eam tr\u1ecdng h\u01a1n khi ph\u00e1t hi\u1ec7n ra r\u1eb1ng nh\u00e0 nghi\u00ean c\u1ee9u \u0111\u00e3 chia s\u1ebb l\u1ed7i n\u00e0y v\u1edbi hai ng\u01b0\u1eddi kh\u00e1c. Nh\u1eefng ng\u01b0\u1eddi n\u00e0y \u0111\u00e3 l\u1ee3i d\u1ee5ng l\u1ed7i n\u00e0y \u0111\u1ec3 r\u00fat ra c\u00e1c kho\u1ea3n ti\u1ec1n l\u1edbn h\u01a1n nhi\u1ec1u, t\u1ed5ng c\u1ed9ng g\u1ea7n 3 tri\u1ec7u \u0111\u00f4 la t\u1eeb kho b\u1ea1c c\u1ee7a Kraken. Percoco gi\u1ea3i th\u00edch r\u1eb1ng s\u1ed1 ti\u1ec1n n\u00e0y \u0111\u1ebfn t\u1eeb ti\u1ec1n c\u1ee7a Kraken ch\u1ee9 kh\u00f4ng ph\u1ea3i t\u1eeb ti\u1ec1n c\u1ee7a kh\u00e1ch h\u00e0ng.<\/p>\n\n<h3 class=\"wp-block-heading\">Ph\u1ea3n h\u1ed3i c\u1ee7a Kraken<\/h3>\n\n<p>Kraken \u0111\u00e3 y\u00eau c\u1ea7u nh\u1eefng nh\u00e0 nghi\u00ean c\u1ee9u tr\u1ea3 l\u1ea1i ti\u1ec1n v\u00e0 cung c\u1ea5p m\u1ed9t b\u00e1o c\u00e1o \u0111\u1ea7y \u0111\u1ee7 v\u1ec1 c\u00e1c ho\u1ea1t \u0111\u1ed9ng c\u1ee7a h\u1ecd. Tuy nhi\u00ean, c\u00e1c nh\u00e0 nghi\u00ean c\u1ee9u \u0111\u00e3 t\u1eeb ch\u1ed1i tr\u1ea3 l\u1ea1i ti\u1ec1n tr\u1eeb khi Kraken ti\u1ebft l\u1ed9 quy m\u00f4 ti\u1ec1m \u1ea9n c\u1ee7a v\u1ee5 khai th\u00e1c. Percoco \u0111\u00e3 d\u00e1n nh\u00e3n y\u00eau c\u1ea7u n\u00e0y l\u00e0 t\u1ed1ng ti\u1ec1n, kh\u1eb3ng \u0111\u1ecbnh r\u1eb1ng \u0111\u00f3 kh\u00f4ng ph\u1ea3i l\u00e0 h\u00e0nh \u0111\u1ed9ng hack m\u0169 tr\u1eafng.<\/p>\n\n<h3 class=\"wp-block-heading\">H\u00e0nh \u0111\u1ed9ng ph\u00e1p l\u00fd v\u00e0 bi\u1ec7n ph\u00e1p b\u1ea3o m\u1eadt<\/h3>\n\n<p>Do vi ph\u1ea1m c\u00e1c \u0111i\u1ec1u kho\u1ea3n ti\u1ec1n th\u01b0\u1edfng d\u00e0nh cho ng\u01b0\u1eddi t\u00ecm ra l\u1ed7i, Kraken \u0111\u00e3 quy\u1ebft \u0111\u1ecbnh x\u1eed l\u00fd v\u1ee5 vi\u1ec7c nh\u01b0 m\u1ed9t v\u1ee5 \u00e1n h\u00ecnh s\u1ef1. H\u1ecd \u0111\u00e3 ch\u1ecdn kh\u00f4ng ti\u1ebft l\u1ed9 t\u00ean c\u1ee7a c\u00f4ng ty nghi\u00ean c\u1ee9u c\u00f3 li\u00ean quan, tin r\u1eb1ng h\u1ecd kh\u00f4ng \u0111\u00e1ng \u0111\u01b0\u1ee3c c\u00f4ng nh\u1eadn. Thay v\u00e0o \u0111\u00f3, Kraken \u0111\u00e3 ph\u1ed1i h\u1ee3p v\u1edbi c\u00e1c c\u01a1 quan th\u1ef1c thi ph\u00e1p lu\u1eadt \u0111\u1ec3 gi\u1ea3i quy\u1ebft t\u00ecnh h\u00ecnh.<\/p>\n\n<h3 class=\"wp-block-heading\">T\u1ea7m quan tr\u1ecdng c\u1ee7a c\u00e1c ch\u01b0\u01a1ng tr\u00ecnh ti\u1ec1n th\u01b0\u1edfng d\u00e0nh cho ng\u01b0\u1eddi t\u00ecm ra l\u1ed7i<\/h3>\n\n<p>S\u1ef1 c\u1ed1 n\u00e0y nh\u1ea5n m\u1ea1nh t\u1ea7m quan tr\u1ecdng c\u1ee7a c\u00e1c ch\u01b0\u01a1ng tr\u00ecnh ti\u1ec1n th\u01b0\u1edfng d\u00e0nh cho ng\u01b0\u1eddi t\u00ecm ra l\u1ed7i trong vi\u1ec7c x\u00e1c \u0111\u1ecbnh v\u00e0 v\u00e1 c\u00e1c l\u1ed7 h\u1ed5ng b\u1ea3o m\u1eadt. C\u00e1c ch\u01b0\u01a1ng tr\u00ecnh ti\u1ec1n th\u01b0\u1edfng d\u00e0nh cho ng\u01b0\u1eddi t\u00ecm ra l\u1ed7i \u0111\u01b0\u1ee3c thi\u1ebft k\u1ebf \u0111\u1ec3 th\u01b0\u1edfng cho c\u00e1c nh\u00e0 nghi\u00ean c\u1ee9u t\u00ecm v\u00e0 b\u00e1o c\u00e1o l\u1ed7i. Tuy nhi\u00ean, n\u00f3 c\u0169ng cho th\u1ea5y nh\u1eefng r\u1ee7i ro ti\u1ec1m \u1ea9n khi c\u00e1c nh\u00e0 nghi\u00ean c\u1ee9u kh\u00f4ng tu\u00e2n theo c\u00e1c nguy\u00ean t\u1eafc \u0111\u1ea1o \u0111\u1ee9c.<\/p>\n\n<h3 class=\"wp-block-heading\">B\u1ea3o v\u1ec7 c\u00e1c s\u00e0n giao d\u1ecbch ti\u1ec1n m\u00e3 h\u00f3a<\/h3>\n\n<p>C\u00e1c s\u00e0n giao d\u1ecbch ti\u1ec1n m\u00e3 h\u00f3a nh\u01b0 Kraken ph\u1ea3i li\u00ean t\u1ee5c c\u1ea3i thi\u1ec7n c\u00e1c bi\u1ec7n ph\u00e1p b\u1ea3o m\u1eadt c\u1ee7a m\u00ecnh \u0111\u1ec3 b\u1ea3o v\u1ec7 tr\u01b0\u1edbc c\u00e1c h\u00e0nh vi khai th\u00e1c nh\u01b0 v\u1eady. \u0110i\u1ec1u n\u00e0y bao g\u1ed3m vi\u1ec7c ki\u1ec3m tra k\u1ef9 l\u01b0\u1ee1ng c\u00e1c t\u00ednh n\u0103ng m\u1edbi v\u00e0 ph\u1ea3n h\u1ed3i nhanh ch\u00f3ng \u0111\u1ed1i v\u1edbi m\u1ecdi v\u1ea5n \u0111\u1ec1 \u0111\u01b0\u1ee3c b\u00e1o c\u00e1o. B\u1eb1ng c\u00e1ch n\u00e0y, h\u1ecd c\u00f3 th\u1ec3 b\u1ea3o v\u1ec7 n\u1ec1n t\u1ea3ng c\u1ee7a m\u00ecnh v\u00e0 duy tr\u00ec s\u1ef1 tin t\u01b0\u1edfng c\u1ee7a ng\u01b0\u1eddi d\u00f9ng.<\/p>\n\n<p>S\u1ef1 c\u1ed1 l\u1ed7i h\u1ec7 th\u1ed1ng g\u1ea7n \u0111\u00e2y c\u1ee7a Kraken l\u00e0 l\u1eddi nh\u1eafc nh\u1edf v\u1ec1 nh\u1eefng th\u00e1ch th\u1ee9c m\u00e0 c\u00e1c s\u00e0n giao d\u1ecbch ti\u1ec1n m\u00e3 h\u00f3a ph\u1ea3i \u0111\u1ed1i m\u1eb7t. Kraken, s\u00e0n \u0111\u00e3 m\u1ea5t g\u1ea7n 3 tri\u1ec7u \u0111\u00f4 la t\u1eeb kho b\u1ea1c c\u1ee7a m\u00ecnh, \u0111\u00e3 nhanh ch\u00f3ng h\u00e0nh \u0111\u1ed9ng \u0111\u1ec3 kh\u1eafc ph\u1ee5c l\u1ed7i v\u00e0 hi\u1ec7n \u0111ang theo \u0111u\u1ed5i h\u00e0nh \u0111\u1ed9ng ph\u00e1p l\u00fd ch\u1ed1ng l\u1ea1i nh\u1eefng k\u1ebb ch\u1ecbu tr\u00e1ch nhi\u1ec7m. V\u1ee5 vi\u1ec7c n\u00e0y nh\u1ea5n m\u1ea1nh t\u1ea7m quan tr\u1ecdng c\u1ee7a c\u00e1c bi\u1ec7n ph\u00e1p b\u1ea3o m\u1eadt m\u1ea1nh m\u1ebd v\u00e0 c\u00e1c ho\u1ea1t \u0111\u1ed9ng th\u1ef1c h\u00e0nh \u0111\u1ea1o \u0111\u1ee9c trong ng\u00e0nh ti\u1ec1n m\u00e3 h\u00f3a.<\/p>","protected":false},"excerpt":{"rendered":"<p>Kraken ch\u1ecbu thi\u1ec7t h\u1ea1i g\u1ea7n 3 tri\u1ec7u \u0111\u00f4 la do l\u1ed7i h\u1ec7 th\u1ed1ng Kraken, m\u1ed9t s\u00e0n giao d\u1ecbch ti\u1ec1n m\u00e3 h\u00f3a n\u1ed5i ti\u1ebfng, m\u1edbi \u0111\u00e2y \u0111\u00e3 ti\u1ebft l\u1ed9 v\u1ec1 m\u1ed9t&hellip;<\/p>\n","protected":false},"author":2,"featured_media":1276,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1,3],"tags":[],"class_list":["post-1274","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-uncategorized","category-news"],"_links":{"self":[{"href":"https:\/\/bitcoinnewscrypto.com\/vi\/wp-json\/wp\/v2\/posts\/1274","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/bitcoinnewscrypto.com\/vi\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/bitcoinnewscrypto.com\/vi\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/bitcoinnewscrypto.com\/vi\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/bitcoinnewscrypto.com\/vi\/wp-json\/wp\/v2\/comments?post=1274"}],"version-history":[{"count":1,"href":"https:\/\/bitcoinnewscrypto.com\/vi\/wp-json\/wp\/v2\/posts\/1274\/revisions"}],"predecessor-version":[{"id":1275,"href":"https:\/\/bitcoinnewscrypto.com\/vi\/wp-json\/wp\/v2\/posts\/1274\/revisions\/1275"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/bitcoinnewscrypto.com\/vi\/wp-json\/wp\/v2\/media\/1276"}],"wp:attachment":[{"href":"https:\/\/bitcoinnewscrypto.com\/vi\/wp-json\/wp\/v2\/media?parent=1274"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/bitcoinnewscrypto.com\/vi\/wp-json\/wp\/v2\/categories?post=1274"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/bitcoinnewscrypto.com\/vi\/wp-json\/wp\/v2\/tags?post=1274"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}