http://www.7klian.com

慢雾安详团队:门罗币(XMR)锁定转账进攻细节阐明

所有受影响 RPC 接口(1)get_transfer

(2)get_bulk_payments

note - string; Note about this transfer.

subaddr_index - JSON object containing the major & minor subaddress index:

payment_ids - array of: string; Payment IDs used to find the payments (16 characters hex).

By: ISME@SlowMist Team

subaddr_index - subaddress index:

造成影响首先该进攻不会导致生意业务所任何资金损失,可是会锁定了生意业务所 XMR 活动性。

极度环境举例:假如生意业务所收到的都是需要锁定一年甚至更多年的门罗币则会导致一年内用户来提币的时候无币可以提(只能去购置特另外币来给用户提取)。

subaddr_indices - array of unsigned int; (Optional) List of subaddress indices to query for transfers. (Defaults to empty - all indices)

附:以下内容为官方文档摘录

20000:为锁定区块数

pending - boolean; (Optional) Include pending transfers.

unlock_time - unsigned int; Number of blocks until transfer is safely spendable.

Example:$ curl -X POST :18082/json_rpc -d '{"jsonrpc":"2.0","id":"0","method":"get_payments","params":{"payment_id":"60900e5603bf96e3"}}' -H 'Content-Type: application/json' { "id": "0", "jsonrpc": "2.0", "result": { "payments": [{ "address": "55LTR8KniP4LQGJSPtbYDacR7dz8RBFnsfAKMaMuwUNYX6aQbBcovzDPyrQF9KXF9tVU6Xk3K8no1BywnJX6GvZX8yJsXvt", "amount": 1000000000000, "block_height": 127606, "payment_id": "60900e5603bf96e3", "subaddr_index": { "major": 0, "minor": 0 }, "tx_hash": "3292e83ad28fc1cc7bc26dbd38862308f4588680fbf93eae3e803cddd1bd614f", "unlock_time": 0 }] } }get_bulk_payments

Get a list ofincoming payments using a given payment id, or a list of payments ids, from agiven height. This method is the preferred method over get_paymentsbecause it has the same functionality butis more extendable. Either is fine for looking up transactions by a singlepayment ID.

Inputs:

tx_hash - string; Transaction hash used as the transaction ID.

Example:$ curl -X POST :18082/json_rpc -d '{"jsonrpc":"2.0","id":"0","method":"get_bulk_payments","params":{"payment_ids":["60900e5603bf96e3"],"min_block_height":"120000"}}' -H 'Content-Type: application/json' { "id": "0", "jsonrpc": "2.0", "result": { "payments": [{ "address": "55LTR8KniP4LQGJSPtbYDacR7dz8RBFnsfAKMaMuwUNYX6aQbBcovzDPyrQF9KXF9tVU6Xk3K8no1BywnJX6GvZX8yJsXvt", "amount": 1000000000000, "block_height": 127606, "payment_id": "60900e5603bf96e3", "subaddr_index": { "major": 0, "minor": 0 }, "tx_hash": "3292e83ad28fc1cc7bc26dbd38862308f4588680fbf93eae3e803cddd1bd614f", "unlock_time": 0 }] } }get_transfer_by_txid

Show informationabout a transfer to/from this address.

note - string; Note about this transfer.

FromAddress:发送地点(一般为进攻者钱包地点)

block_height - unsigned int; Height of the block that first confirmed this payment.

Example:$ curl -X POST :18082/json_rpc -d '{"jsonrpc":"2.0","id":"0","method":"get_transfer_by_txid","params":{"txid":"c36258a276018c3a4bc1f195a7fb530f50cd63a4fa765fb7c6f7f49fc051762a"}}' -H 'Content-Type: application/json' { "id": "0", "jsonrpc": "2.0", "result": { "transfer": { "address": "55LTR8KniP4LQGJSPtbYDacR7dz8RBFnsfAKMaMuwUNYX6aQbBcovzDPyrQF9KXF9tVU6Xk3K8no1BywnJX6GvZX8yJsXvt", "amount": 300000000000, "confirmations": 1, "destinations": [{ "address": "7BnERTpvL5MbCLtj5n9No7J5oE5hHiB3tVCK5cjSvCsYWD2WRJLFuWeKTLiXo5QJqt2ZwUaLy2Vh1Ad51K7FNgqcHgjW85o", "amount": 100000000000 },{ "address": "77Vx9cs1VPicFndSVgYUvTdLCJEZw9h81hXLMYsjBCXSJfUehLa9TDW3Ffh45SQa7xb6dUs18mpNxfUhQGqfwXPSMrvKhVp", "amount": 200000000000 }], "double_spend_seen": false, "fee": 21650200000, "height": 153624, "note": "", "payment_id": "0000000000000000", "subaddr_index": { "major": 0, "minor": 0 }, "suggested_confirmations_threshold": 1, "timestamp": 1535918400, "txid": "c36258a276018c3a4bc1f195a7fb530f50cd63a4fa765fb7c6f7f49fc051762a", "type": "out", "unlock_time": 0 } } }点击查察官方文档:

https://www.getmonero.org/resources/developer-guid...

minor - unsigned int; Index of the subaddress in the account.

Outputs:

payments - list of:

destinations - array of JSON objects containing transfer destinations:

type - string; Transfer type: "in"

timestamp - unsigned int; POSIX timestamp for when this transfer was first confirmed in a block (or timestamp submission if not mined yet).

locked_transfer FromAddress ToAddress 0.0101 20000

major - unsigned int; Account index for the subaddress.

克日据慢雾区情报显示,针对门罗币(XMR)转账锁定进攻在多个生意业务所呈现,慢雾安详团队在收到情报第一时间举办阐明跟进,本着认真任披露的原则我们第一时间在慢雾区举办了预警并为我们所处事的客户举办了实时的情报同步以及协助检测和修复。如有其他需要提供验证和检测处事接待接洽慢雾安详团队。

double_spend_seen - boolean; True if the key image(s) for the transfer have been seen before.

filter_by_height - boolean; (Optional) Filter transfers by block height.

进攻步调0x01:通过 monero-wallet-cli 输入暗码登录钱包

0x02:通过呼吁发送锁定生意业务

郑重声明:本文版权归原作者所有,转载文章仅为传播更多信息之目的,如作者信息标记有误,请第一时间联系我们修改或删除,多谢。