香港金融科技周期间，行业领袖正在寻找应对加密货币犯罪的解决方案，此前币安遭遇历史性黑客攻击，超过30亿美元被盗资产仍掌握在据称的朝鲜黑客手中。
Industry leaders at Hong Kong’s Fintech Week are searching for solutions to crypto crime in the wake of Binance’s historic hack, with over US$3 billion in stolen assets still in the hands of alleged North Korean hackers.
“必须能够将每一个端点和每一台服务器都视为可能被攻陷的地方，并基于它可能已被攻陷这一原则开展工作，”数字资产基础设施公司Fireblocks全球银行业务主管Tim Way周一在接受采访时表示。
“You have to be able to treat every end point and every server as a possible place that might be compromised and work on the principle that it might be compromised,” said Tim Way, global head of banking initiatives at digital asset infrastructure firm Fireblocks, during an interview on Monday.
他强调未经授权的签名是一种潜在的安全故障，并强调及时发现此类问题的重要性，因为“一旦上链，就很难撤销”。
He highlighted unauthorised signatures as one potential security failure and stressed the importance of catching them, because “once it’s gone to the blockchain, it’s hard to unpick it”.
据币安称，黑客——美国政府和多家分析公司认定为朝鲜国家资助的组织——可能利用一名工程师被攻陷的笔记本电脑进行未经授权的提款，导致了这起高达64.3亿美元的历史性加密货币盗窃案。币安周日恢复运营后，客户提取了36.4亿美元资产。
Hackers – whom the US government and various analytics firms identified as a North Korean state-sponsored group – likely exploited an engineer’s compromised laptop to make unauthorised withdrawals resulting in the historic US$6.43 billion cryptocurrency heist, according to Binance. Binance customers pulled US$3.64 billion in assets when the cryptocurrency exchange resumed operations on Sunday.
“我不一定认为存在广泛的信任问题，”Way表示，但补充说“大家更加关注……了解投资对象的安全控制措施是什么。”人工智能以极快的速度在数字资产领域——以及更广泛的软件领域——挖掘并利用漏洞，这使得“多层次的安全和风险管理方法……绝对至关重要，”Way说。
“I don’t necessarily think there is a widespread trust issue,” said Way, but added that “folks are putting more focus on … understanding what the security controls are of who they invest in.”The rapid speed with which artificial intelligence was enabling vulnerabilities to be found and exploited in the digital asset space – and the software space more broadly – made a “multilayered approach to security and risk management … absolutely essential,” Way said.
“对监管机构而言，最重要的[启示]是，在以太坊等公共区块链和无许可代币上，你无法像稳定币那样冻结[被盗资产]，”区块链监管科技公司RigSec高级解决方案总监黄艺璇（Yixuan Huang，音）表示。
“The most important [takeaway for regulators] is that on public blockchain and permissionless tokens like Ethereum, you cannot freeze [stolen assets] like you can with stablecoin,” said Yixuan Huang, senior solutions director at blockchain regulatory technology company RigSec.
区块链分析公司Elliptic称，在Tether和Circle等稳定币发行商冻结部分被盗稳定币之前，黑客已将约7.86亿美元兑换成ETH，即以太坊区块链上的原生加密货币。
Before stablecoin issuers like Tether and Circle froze some of the stolen stablecoins, the hackers converted around US$786 million to ETH, the native cryptocurrency on the Ethereum blockchain, according to blockchain analytics firm Elliptic.
黄表示，“被动式签名”应升级为“意图验证式签名”，即不仅验证“谁可以签名”，还要验证“可以签什么”，以帮助加强安全性。她补充说，AI可以轻易伪造“谁”的部分，但无法伪造“什么”的部分。
“Passiveg should be updated to intent-verifiedg” – which would verify not only “who can sign” but also “what can be signed” – to help strengthen security, according to Huang. AI could easily falsify the “who” part, but not the “what” part, she added.
黄说，“盲签”是2025年Bybit被盗事件的关键因素——该事件使这家总部位于迪拜的交易公司损失了约15亿美元的代币——因为交易背后的“恶意意图”未被识别出来。
“Blindg” was a key factor in the Bybit heist in 2025 – which cost the Dubai-based trading company around US$1.5 billion in tokens – because the “malicious intent behind the transactions” was not identified, Huang said.
她还指出，硬件解决方案是一种高安全性的替代方案，因为AI相对“更容易在软件中发现漏洞”，但她补充说，满足监管要求将需要更长时间。
She also pointed to hardware solutions as a high-security alternative, since it was comparatively “easier for AI to find vulnerabilities in software”, but added that meeting regulatory requirements would take longer.
香港高级官员周一以主题演讲为香港金融科技周x StartmeupHK 2026揭幕，主题是香港在发展创新且安全的金融科技生态系统方面的领导地位。
Senior city officials kicked off Hong Kong’s FinTech Week x StartmeupHK 2026 on Monday with keynote speeches on Hong Kong’s leadership in developing an innovative and secure fintech ecosystem.