字号·· | 护眼
南华早报

随着暴力加密货币抢劫案激增,需要更好的保护Better protection needed as violent cryptocurrency robberies surge

点「原文对照」整页切到原文,或双击某段只看那段的原文。

加密货币许诺的金融自由伴随着行业必须直面的代价:财富增长会让持有者成为暴力犯罪更具吸引力的目标。在将持有者的人身安全视为私人事务的同时保护数字资产,这种做法无法构成充分的金融安全保障。

Cryptocurrency’s promise of financial freedom carries a cost the industry must confront: growing wealth can make its owners more attractive targets for violent criminals. Protecting digital assets while treating the physical safety of their holders as a personal matter is an inadequate approach to financial security.

行业必须承担起责任,设计出能够考量“人们可能在威胁下被迫交出资产”这一现实的产品和服务。

The industry must take responsibility for designing products and services which account for the reality that people can be threatened into surrendering their assets.

“扳手攻击”的激增——即利用肢体暴力或威胁强迫他人交出加密货币——暴露了这一脆弱性。钱包可能抵御得了复杂的黑客攻击,但其持有者却仍易受胁迫。当一个人能够立即授权转移巨额财富时,此人及其家人就可能成为犯罪胁迫的目标。

The rise in “wrench attacks” – physical violence or threats used to force someone to surrender cryptocurrency – exposes this vulnerability. A wallet may resist sophisticated hacking while its owner remains vulnerable to coercion. When one person can immediately authorise the transfer of substantial wealth, that person and their family can become targets of criminal coercion.

上半年,暴力犯罪从加密货币持有者手中勒索了超过3000万美元。若这一势头持续,全年损失可能超过去年的5800万美元。行业有理由将投资者保护的定义扩展到价格波动、账户被盗和平台故障等风险之外。截至6月下旬,全球共记录在案46起事件——人身胁迫是一项严重的金融安全风险。

Violent criminals extracted over US$30 million from cryptocurrency holders in the first half of the year. If that pace continues, annual losses could exceed last year’s US$58 million. The industry has reason to expand its definition of investor protection beyond the risks of price volatility, account theft and platform failure. Worldwide, 46 incidents were documented through to late June – physical coercion is a serious financial security risk.

投资组合价值可能倍增,而其持有者的安全安排却维持原状。研究发现比特币价格与报告的肢体攻击案件之间存在相关性,但仅凭相关性无法确定增长中有多少归因于价格波动、采用率提升、信息泄露或报告机制改善。

A portfolio may multiply in value while its owner’s security arrangements remain unchanged. Research has identified a correlation between bitcoin prices and reported physical attacks, but correlation alone cannot establish how much of the increase is attributable to price movements, adoption, information exposure or improved reporting.

而且,威胁可能在行情见顶后依然存在。一旦某人因拥有大量加密货币财富而为人所知——或仅仅是被认为拥有——这种名声可能会长期挥之不去。

And the threat can outlast a rally. Once someone becomes known – or is simply believed – to possess substantial cryptocurrency wealth, that reputation may persist.

去年12月,蒙面闯入者闯入英格兰索利赫尔一名加密货币投资者的住所,对他进行袭击并威胁其怀孕的妻子。在45分钟的 ordeal 中,他被迫转移了价值数十万英镑的加密货币。今年3月,香港警方接到报案,称一名男子在红磡一家酒店被袭击,价值约530万港元(约合675,342美元)的加密货币被抢走。据报道,价值另外80万港元的白银也被盗走。

Last December, masked intruders attacked a cryptocurrency investor at his home in Solihull, England, and threatened his pregnant wife. He transferred cryptocurrency worth hundreds of thousands of pounds during the 45-minute ordeal. In March, Hong Kong police received a report that a man had been assaulted in a Hung Hom hotel and robbed of cryptocurrency worth about HK$5.3 million (US$675,342). Silver worth a further HK$800,000 was also reportedly taken.

这些案例揭示了数字安全的一个令人不安的局限性。交易系统可以检查是否提供了所需的加密授权。但这并不能确定提供授权的人是否是在自愿行事。面临暴力威胁的持有人可能在完全违背自己意愿的情况下,仍然完成了所有必要的安全步骤。

These cases reveal an uncomfortable limitation of digital security. A transaction system can check whether the required cryptographic authorisation has been supplied. That does not establish whether the person supplying it is acting freely. A holder threatened with violence may complete every required security step while acting entirely against their wishes.

自我托管使这一问题尤为重要,因为它可能将广泛的金融权力集中在一个人手中。这种权力确实有其好处:直接所有权、便携性以及对中介机构的依赖减少。但它也改变了谁应承担胁迫后果的责任。

Self-custody makes this problem especially important because it can place extensive financial authority in one person’s hands. That authority has genuine benefits: direct ownership, portability and reduced dependence on an intermediary. It also changes who must manage the consequences of coercion.

传统金融同样面临胁迫风险。银行客户可能受到威胁,而制度性控制也可能失效。但取款限额、独立审批、延迟处理以及对异常活动的检查,可以为干预创造机会。这些安排虽然会给合法用户带来成本,但在评估金融产品时,若主要看重速度和便利性,其保护价值仍值得被承认。

Conventional finance faces coercion too. Bank customers can be threatened and institutional controls can fail. But withdrawal limits, independent approvals, delays and checks for unusual activity can create opportunities for intervention. These arrangements impose costs on legitimate users, yet their protective value deserves recognition when financial products are evaluated primarily for speed and convenience.

避免公开财富的建议虽有用处,但不能替代机构责任。个人可能因被要求提供的记录或他们从未意图披露的信息而暴露财富。暴力行为的责任始终在于施暴者。

Advice to avoid publicising wealth can be useful, but it cannot substitute for institutional responsibility. People can be exposed through records they were required to provide or through information they never intended to disclose. Responsibility for violence remains with the perpetrators.

行业的回应因此应同时关注托管设计及其周边服务。多个独立的批准可以减少对单一密钥或设备的依赖。延迟提款和交易限额可能减少在短期胁迫期间可获取的金额。

The industry’s response should therefore address both custody design and the services surrounding it. Multiple independent approvals can reduce reliance on a single key or device. Delayed withdrawals and transaction limits may reduce the amount accessible during a short period of coercion.

这些机制均无法保证人身安全。它们会增加复杂性,且罪犯可能在技术限制下继续进行威胁。

None of these mechanisms guarantees physical safety. They introduce complexity and criminals may continue threatening despite technical restrictions.

区块链记录有助于刑事调查,尽管可追溯性并不自动赋予冻结或追回资产的能力。在某些情况下,追回是可能的:在绑架Ledger联合创始人David Balland及其伴侣获救后,法国当局表示,几乎所有作为赎金支付的加密货币已被追踪、冻结和扣押。这一结果取决于调查人员、行动干预和机构合作。它表明,数字所有权的实际保护仍然依赖于公共系统。

Blockchain records can help criminal investigations although traceability does not automatically provide the power to freeze or recover assets. Recovery is possible in some cases: after the rescue of kidnapped Ledger co-founder David Balland and his partner, French authorities said almost all the cryptocurrency paid as ransom had been traced, frozen and seized. That outcome depended on investigators, operational intervention and institutional cooperation. It shows how the practical protection of digital ownership continues to depend on public systems.

财务损失仅捕捉了伤害的一部分。即使勒索未遂,也可能导致人员受伤、家庭流离失所或儿童创伤。即使被盗资金全部追回,也无法恢复在袭击期间失去的安全感。

Financial losses capture only part of the harm. An unsuccessful extortion attempt can still leave a person injured, a family displaced or a child traumatised. Even complete recovery of stolen funds cannot restore the sense of safety lost during an attack.

随着加密货币财富在市场周期中增长,行业必须认识到财富的变化会改变其所有者面临的犯罪风险。安全承诺应经受住客户感到恐惧、孤立或保护亲人时所发生情况的考验。估值上升可能使投资者更富有。一个成熟的金融生态系统也必须为该投资者——以及他们周围的人——提供可信的方式以保持安全。

As cryptocurrency fortunes grow across market cycles, the industry must recognise that wealth changes its owners’ exposure to crime. Security promises should be tested against what happens when a customer is frightened, isolated or protecting a loved one. A rising valuation can make an investor wealthier. A mature financial ecosystem must also give that investor – and the people around them – credible ways to remain safe.