[EN]
Hello, Orbit Chain community.

The Orbit Chain team is conducting an in-depth analysis of the Unverified Path of Orbit Bridge and plans to transparently share information related to it with the community.

[Details about Exploit]
To supply the initial ETH, attacker 0x9263e7873613ddc598a701709875634819176aff used Tornado.Cash.
TXID : https://etherscan.io/tx/0x5e35f4b1886d62543cc027b5c0ef54aac3901a25c37d8ea6b1ab8861c9bd09dd

The wallet addresses used by the attacker to receive the stolen coins are listed below.
0x27e2cc59a64d705a6c3d3d306186c2a55dcd5710
0x3a886a63c768665a9830886e608d6f9dc6b4f730
0x9ca536d01b9e78dd30de9d7457867f8898634049
0x009b60aab8e64c8f5fe449bd96fa78b1a7fffcc5
0xa70f8917a957757f5505a5535df1591c54f65b9d
0xdadfa3ccd40fc3d5a0164c6f9444f60163ccbf3b

The attacker then sent the coins to the wallet addresses listed below.
0x42839f4423985b5ef989498b0605b1dcca8f0df1
0xf49de491e1c0d84a0e0bd2d57a841825fcf179fd
0x589257e07e11e761f31956d54b2323f63ee36b7d
0x0C43EdEb2eE69C27d689E912ab5b8E8EEF128D4c
0x817bb1761b715a08a9142f99fa7d0ccf73f4c0ef
0x157a409c2bfff38209a32e55d3eac1bfc93dd664
0xe03d37392255fd1dae5476b04388315cc70b78c2
0x5e22cb028865d6a93080d7ab42d2fe9a0e8dc085

TXIDs that attacked Orbit Bridge's Ethereum Vault
https://etherscan.io/tx/0x958aeec58ea2f0f9700adda24e43fb76f9e052e4c20773f180c49d7529d95f16
https://etherscan.io/tx/0xafdc36278fcef8d54824b09ec019147cfe2afd995abf6754e52d273a2c1b07ca
https://etherscan.io/tx/0xe0bada18fdc56dec125c31b1636490f85ba66016318060a066ed7050ff7271f9
https://etherscan.io/tx/0x639d27e564214411ad8eb06cf00d85cd90f83503a53ab5bf35dd5c6e1148ae0a
https://etherscan.io/tx/0x64a6f486c20671e1389b3c7948d46733325c407245a86bf510cb69ef401a3f0e
https://etherscan.io/tx/0xd8ca42941a0a2c25669267ad8d61f7f9f4118252cb502316602fe16624b80ac8

If you, the community members, discover any suspicious activities or unusual behavior based on the information provided, please share the details through the 'Add a Comment' feature on the official channel. Participation from the community is greatly appreciated.

Thank you.

[KOR]
안녕하세요, 오르빗 체인 커뮤니티 여러분!

오르빗 체인 팀은 오르빗 브릿지 미확인 경로에 대한 접근에 대해 심도있는 분석을 계속 진행하고 있으며, 이와 관련된 정보를 커뮤니티에 투명하게 공개할 예정입니다.

[익스플로잇 관련 정보]
공격자 주소
0x9263e7873613ddc598a701709875634819176aff

공격자 주소에게 최초 ETH 공급 주소(토네이도 캐시)
0x70462bfb204bf3ccb0560f259072f8e3a85b3512
TXID : https://etherscan.io/tx/0x5e35f4b1886d62543cc027b5c0ef54aac3901a25c37d8ea6b1ab8861c9bd09dd

기타 추가 ETH 공급 주소
0x27e2cc59a64d705a6c3d3d306186c2a55dcd5710

탈취 자산 직접 수령 주소
0x27e2cc59a64d705a6c3d3d306186c2a55dcd5710
0x3a886a63c768665a9830886e608d6f9dc6b4f730
0x9ca536d01b9e78dd30de9d7457867f8898634049
0x009b60aab8e64c8f5fe449bd96fa78b1a7fffcc5
0xa70f8917a957757f5505a5535df1591c54f65b9d
0xdadfa3ccd40fc3d5a0164c6f9444f60163ccbf3b

탈취 자산이 분산되는 지갑 주소
0x42839f4423985b5ef989498b0605b1dcca8f0df1
0xf49de491e1c0d84a0e0bd2d57a841825fcf179fd
0x589257e07e11e761f31956d54b2323f63ee36b7d
0x0C43EdEb2eE69C27d689E912ab5b8E8EEF128D4c
0x817bb1761b715a08a9142f99fa7d0ccf73f4c0ef
0x157a409c2bfff38209a32e55d3eac1bfc93dd664
0xe03d37392255fd1dae5476b04388315cc70b78c2
0x5e22cb028865d6a93080d7ab42d2fe9a0e8dc085

오르빗 브릿지 Ethereum Vault를 공격한 TXID
https://etherscan.io/tx/0x958aeec58ea2f0f9700adda24e43fb76f9e052e4c20773f180c49d7529d95f16
https://etherscan.io/tx/0xafdc36278fcef8d54824b09ec019147cfe2afd995abf6754e52d273a2c1b07ca
https://etherscan.io/tx/0xe0bada18fdc56dec125c31b1636490f85ba66016318060a066ed7050ff7271f9
https://etherscan.io/tx/0x639d27e564214411ad8eb06cf00d85cd90f83503a53ab5bf35dd5c6e1148ae0a
https://etherscan.io/tx/0x64a6f486c20671e1389b3c7948d46733325c407245a86bf510cb69ef401a3f0e
https://etherscan.io/tx/0xd8ca42941a0a2c25669267ad8d61f7f9f4118252cb502316602fe16624b80ac8

커뮤니티 여러분들께서도 공개된 정보를 기반으로 이상 동작이나 의심스러운 활동을 발견하신다면, 공식 채널의 ‘Add a Comment’ 기능을 통해 내용을 공유해 주시기 바랍니다. 커뮤니티 여러분들의 적극적인 참여를 부탁드립니다.

감사합니다!

https://twitter.com/Orbit_Chain/status/1741763278416773345