Original post · AI translation
TechCrunch：朝鲜黑客从币安盗走了那笔 63 亿美元资金，这是有记录以来规模最大的加密货币盗窃案。
币安将入侵入口追溯至一名 DevOps 工程师遭入侵的笔记本电脑；攻击者通过该电脑进入了一个能够提交未经授权的提现请求的服务容器。
币安没有发现钱包私钥泄露的迹象，因此攻击者显然是滥用了提现软件，而不是直接取得对加密货币的控制权。
在资金跨区块链转移的过程中，合作伙伴已冻结约 30 亿美元，币安也承诺承担用户的全部损失。
TRM Labs 将此次盗窃归因于朝鲜组织 TraderTraitor；该组织也是此前纪录保持者——2025 年价值 15 亿美元的 Bybit 盗窃案——的幕后黑手。
币安重建提现服务期间，提现仍处于暂停状态；其关于用户资金安全的说法还有待更新后的储备证明加以验证。
调查人员还发现了其他入侵点，因此币安现在必须解释，为何 1 名工程师的访问权限能够触及转移数十亿美元资金的系统。
Original
Techcrunch: North Korean hackers drained that $6.3B from Binance, the largest crypto theft recorded. Binance traces the entry to a compromised DevOps engineer’s laptop, which reached a service container able to submit unauthorized withdrawals. It found no sign that wallet private keys leaked, so the attacker apparently abused withdrawal software instead of seizing direct control of the crypto. Partners have frozen about $3B as the funds crossed blockchains, and Binance has pledged to cover all user losses. TRM Labs attributes the theft to TraderTraitor, the North Korean cell behind the previous record, the $1.5B Bybit heist in 2025. Withdrawals stay suspended while Binance rebuilds its withdrawal service, and its claim that user funds are safe awaits an updated proof of reserves. Investigators have also found additional breach points, so Binance must now explain how 1 engineer’s access reached systems that move billions.
币安的初步调查表明，此次安全事件可能涉及一名 DevOps 工程师遭入侵的笔记本电脑，这使攻击者得以访问一个服务容器，并提交未经授权的提现交易。我们没有发现任何钱包私钥泄露的证据。调查完成且事实得到充分核实后，我们将发布详细的技术事后分析报告。
预计总影响约为 63 亿美元。我们已与区块链合作伙伴合作冻结受影响资产，迄今已在链上冻结约 30 亿美元。
币安将从 SAFU 基金和公司资金中承担全部损失。用户资金是安全的。补救工作完成后，我们还将发布更新后的储备证明。
作为即刻采取的预防措施，币安已：
- 在安全检查完成前暂时暂停充值和提现；
- 撤销受影响地址的授权；
- 与执法机构和区块链情报合作伙伴合作，追踪并追回资金。
我们的团队正在昼夜不停地工作，以安全、彻底地解决这一问题。我们正与执法合作伙伴密切合作，确认这些犯罪分子的身份并将其绳之以法。
请仅通过币安官方渠道获取最新消息。如有其他问题，请随时联系币安客服。
https://t.co/ywB2mKFy0p
Original
Binance's initial investigation suggests that the security incident may involve a compromised DevOps engineer’s laptop, which allowed an attacker to gain access to a service container and submit unauthorized withdrawal transactions. We have found no evidence of any wallet private key leak. We will share a detailed technical post-mortem once the investigation is complete and the facts are fully verified. The estimated total impact sits at around $6.3B. We have worked with blockchain partners to freeze affected assets, with ~$3 billion frozen on-chain so far. Binance will cover all losses from the SAFU fund and the company’s funds. User funds are safe. We will also publish an updated Proof of Reserves once the remediation is complete. As an immediate precaution, Binance has: - temporarily suspended deposits and withdrawals while security checks are completed; - revoked the affected address authorisation; - engaged law enforcement and blockchain intelligence partners to trace and recover funds. Our teams are working around the clock to resolve this issue safely and thoroughly. We are working closely with our law enforcement partners to confirm the identity of these criminals and bring them to justice. Please rely only on official Binance channels for updates. Please feel free to contact Binance Customer Support if you have any further questions. https://t.co/ywB2mKFy0p