字号·· | 护眼
美国消费者新闻与商业频道

加密货币交易所呼吁迅速采取行动加强防御,此前币安遭窃Crypto exchanges call for quick moves to bolster defenses after Binance heist

点「原文对照」整页切到原文,或双击某段只看那段的原文。

加密货币交易所正在采取快速行动加强防御,并呼吁行业内更广泛地共享信息,此前针对币安的创纪录63亿美元黑客攻击暴露了其脆弱性,而加密货币交易所正越来越深入地融入主流金融。

Crypto exchanges are taking quick action to bolster their defences and urging greater industry-wide information-sharing after a record $6.3 billion hack of Binance exposed their vulnerability just as they become more embedded in mainstream finance.

Coinbase表示,它对存储加密货币密钥的离线系统进行了调整,纯粹是“出于谨慎考虑”,而Kraken表示,它正在监控行业事件,以吸取可应用于自身防御的经验。

Coinbase said it made adjustments to its systems that store cryptocurrency keys offline "solely out of an abundance of caution," while Kraken said it was monitoring industry incidents for lessons it could apply to its defences.

但分析师和行业高管表示,行业需要紧急行动,因为特朗普总统的监管机构推动数字资产更深入地融入金融体系,这提高了一个有着重大黑客攻击历史的行业的风险。

But the industry will need to move urgently, analysts and industry executives said, as President Donald Trump's regulators promote deeper integration of digital assets into the financial system, raising the stakes for an industry with a history of big hacks."

“要让加密货币发挥其全部潜力,安全状况必须立即得到解决,”富兰克林邓普顿加密货币负责人克里斯·珀金斯表示。

For crypto to reach its full potential, the security situation must be addressed immediately," said Chris Perkins, Franklin Templeton's head of crypto.

全球最大的加密货币交易所币安在周四的攻击后暂停了提现,分析师将此次攻击归咎于朝鲜,并表示将使用公司资金来弥补损失。

Binance, the world's largest crypto exchange, halted withdrawals after Thursday's attack — which analysts blamed on North Korea — and said it would use company funds to cover the losses.

币安联合首席执行官理查德·滕在X上表示,这次“复杂的攻击”可能始于一名被攻破的软件工程师的笔记本电脑,使黑客能够访问用于处理提现的系统。

Binance co-CEO Richard Teng said on X that the “complex attack” may have begun with a compromised software engineer’s laptop, giving hackers access to systems used to process withdrawals.

该公司后来发现了更多违规行为,而旨在擦除攻击痕迹的软件阻碍了调查。 rival 加密货币交易所周五迅速行动,加强自身系统,并向客户保证其代币安全。“Kraken 的全职团队每天都在寻找潜在漏洞,”一名 Kraken 发言人表示。尽管如此,即使行业正遭受有史以来最大规模加密货币盗窃案的冲击,高管们仍对 Binance 拥有足够资源来弥补损失,以及此次黑客攻击不会产生更广泛的金融影响表示信心。

The company later found additional breaches, while software designed to erase traces of the attack hampered the investigation. Rival crypto exchanges moved quickly on Friday to shore up their own systems and to reassure customers that their tokens were safe“Full-time teams at Kraken look for potential vulnerabilities every day,” a Kraken spokesperson said. Still, even as the industry reeled from the biggest cryptocurrency heist of all time, executives expressed confidence that Binance had sufficient resources to cover the losses and that the hack would not have broader financial repercussions.

周四,比特币下跌超过 4%,以太币(第二大加密货币)下跌超过 5%,尽管两种代币周五收回了一些跌幅。“我们预计,整个行业实际上不会遭受实质性损失,尽管 Binance 显然将不得不直接处理这次漏洞利用事件,”加密货币公司 GSR 的首席法律和战略官 Josh Riezman 表示。据美国区块链分析公司 TRM Labs 和 Chainalysis 称,此次盗窃案的大部分发生在周四晚间大约 20 分钟内,与之前被归咎于朝鲜的攻击相似。

Bitcoin fell more than 4% on Thursday while ether, the second-largest cryptocurrency, fell more than 5%, although both tokens recovered some of that ground on Friday." Our expectation is the industry writ large will actually not suffer material losses, even though Binance is obviously going to have to deal with the exploit directly," said Josh Riezman, chief legal and strategy officer at crypto firm GSR. The bulk of the heist unfolded in around 20 minutes late on Thursday and bore similarities to previous attacks blamed on North Korea, according to US blockchain analysis firms TRM Labs and Chainalysis.

朝鲜经常否认参与加密货币盗窃,其日内瓦使团未回应置评请求。黑客攻击涉及社会工程学和洗钱。虽然许多细节仍不清楚,但安全专家表示,社会工程学(一种黑客诱骗受害者透露敏感信息或授予系统访问权限的常见手段)可能参与了笔记本电脑的入侵。Circuit(一家加密货币风险基础设施公司)首席执行官 Harry Donnelly 表示,公司正计划加强员工培训,以防范社会工程学攻击。在这类攻击中,黑客竞相在交易所发现入侵、代币发行方冻结资产之前洗钱。

North Korea routinely denies involvement in cryptocurrency thefts, and its mission in Geneva did not respond to requests for comment.HACK INVOLVES SOCIAL ENGINEERING, MONEY LAUNDERINGWhile much remains unclear, social engineering, a common tactic in which hackers trick victims into revealing sensitive information or granting access to systems, may have been involved in compromising the laptop, security experts said. Harry Donnelly, CEO of Circuit, a crypto risk infrastructure company, said companies are planning more employee training to guard against social engineering attacks. In such attacks, hackers race to launder the funds before the exchange detects the breach and token issuers freeze assets.

稳定币发行商 Tether 表示,已冻结与币安有关的近 15.7 亿美元资金,而 Circle 表示冻结了 8 亿美元。比特币和以太币无法被冻结,因为没有单一实体控制这些代币。Chainalysis 称,黑客似乎在使用此前未见过的复杂洗钱模式。

Stablecoin issuer Tether said it had frozen nearly $1.57 billion linked to Binance, while Circle said it froze $800 million. Bitcoin and ether cannot be frozen because no single entity controls the coins. Chainalysis said the hackers appeared to be using sophisticated laundering patterns it had not seen before.

周五,一些加密货币交易所高管呼吁行业建立协同的黑客攻击检测系统。“我们需要一个实时预警系统,让参与者在黑客攻击发生时能立即共享信息、协同快速响应,并暂时冻结疑似被盗资金,”加密货币交易所 OKX 首席执行官徐明星在 X 平台发文表示。GSR 的 Riezman 补充称,币安遭黑客攻击事件可能推动行业采取行动:“正处于传统金融与数字资产交汇的关键时刻,我认为持续改进显然很重要,而这件事如果有什么作用的话,将成为这一进程的催化剂。”

On Friday, some crypto exchange executives called for the industry to develop a coordinated hack detection system." We need a real-time alert system that allows participants to share information immediately when a hack occurs, coordinate a rapid response, and temporarily freeze suspected stolen funds," said Star Xu, CEO of crypto exchange OKX, in a post on X.GSR's Riezman added that the Binance hack could spur the industry to act: "As we're at this kind of confluence moment for traditional finance and digital assets, I think it's obviously important that we continue to improve, and I think this, if anything, will be a catalyst for that."

阅读媒体原文 ↗