加密货币交易所 Bitget 怀疑朝鲜黑客可能是导致约 3.516 亿美元数字资产安全漏洞的幕后黑手，并引用了正在进行的调查中的初步证据。
Crypto exchange Bitget suspects North Korean hackers may be behind a security breach that affected about $351.6 million in digital assets, citing preliminary evidence from an ongoing investigation.
Bitget 首席执行官 Gracy Chen 表示，调查人员发现了与此前朝鲜黑客组织使用过的 VPN 服务相关的互联网协议地址。她在今日早些时候的直播中表示，此次攻击的模式也类似于早前归咎于该国的行动。
Bitget CEO Gracy Chen said investigators identified internet protocol addresses linked to VPN services previously used by a North Korean hacking group. The pattern of the attack also resembled earlier operations attributed to the country, she said in a livestream on earlier today.
Chen 称，进入 Bitget 系统的具体入侵手段仍在技术调查中。
Chen said the specific intrusion method used to enter Bitget’s systems remain under technical investigation.
据 Chen 介绍，Bitget 于周四下午（美东时间）检测到部分钱包出现未经授权的转账，涉及其热钱包和温钱包基础设施的 19 笔转账，而冷钱包保持安全。
Bitget detected unauthorized transfers from some wallets Thursday afternoon stateside, involving 19 transfers from parts of its hot and warm wallet infrastructure, while cold wallets remained secure, according to Chen.
受影响资产包括以太坊、XRP、USDT、USDC、Avalanche 和 BNB，分布在以太坊、XRP Ledger、Avalanche、BNB Smart Chain 和 Arbitrum 网络上。
Affected assets included ether, XRP, USDT, USDC, Avalanche and BNB across the Ethereum, XRP Ledger, Avalanche, BNB Smart Chain and Arbitrum networks. Earlier on-chain estimates put the outflows at about $183 million, but Bitget said those analyses had not captured activity across all affected blockchains.
早期链上估算显示流出资金约为 1.83 亿美元，但 Bitget 表示，这些分析未捕捉到所有受影响区块链上的活动。
The exchange’s security team found that the attacker breached a critical backend wallet system, used it to spoof transfer information and triggered Bitget’s authorization-g process. Chen said that the breach had been contained, preventing further unauthorized outflows.
该交易所的安全团队发现，攻击者攻破了一个关键的后端钱包系统，利用它伪造转账信息并触发了 Bitget 的授权流程。Chen 表示，漏洞已得到遏制，防止了进一步的未经授权流出。她说：“私钥泄露已被排除。”
The exchange’s security team found that the attacker breached a critical backend wallet system, used it to spoof transfer information and triggered Bitget’s authorization-g process. Chen said that the breach had been contained, preventing further unauthorized outflows. "Private key compromise has been ruled out," she said.
提币功能仍处于暂停状态，技术团队正在修复和加固受影响系统，但充币和交易功能继续正常运行。
Withdrawals remain suspended while technical teams repair and reinforce the affected systems, though deposits and trading continue normally.
虽然 Chen 拒绝承诺具体的时间表，但她在袭击发生几小时后在 X 平台的直播中表示，提币功能可能在几小时或几天内恢复，“不应需要几周时间”。
While Chen declined to commit to a firm timetable, she said withdrawals could return within hours or days, but "shouldn't take weeks," in a broadcast on X a few hours after the attack.
公司坚称客户余额准确无误，且损失完全由其用户保护基金覆盖，该基金持有超过 4.64 亿美元。
The company maintains that customer balances are accurate and that the loss is fully covered by its User Protection Fund, which holds more than $464 million.
Bybit首席执行官Ben Zhou表示，其团队随时准备协助Bitget，后者曾在Bybit于2025年2月遭遇15亿美元黑客攻击后提供支持。Zhou补充称，Bybit正在更新其LazarusBounty平台，以帮助追踪被盗资金。
Bybit CEO Ben Zhou said his team was standing by to assist Bitget, which supported Bybit following its $1.5 billion hack in February 2025 Bybit is updating its LazarusBounty platform to help trace the stolen funds, Zhou added. Choose CNBC as your preferred source on Google and never miss a moment from the most trusted name in business news.
在Google上
Choose CNBC as your preferred source on Google and never miss a moment from the most trusted name in business news.