原帖引用 · AI 翻译
TechCrunch：朝鲜黑客从币安窃取了那笔63亿美元资金，创下有记录以来最大规模的加密货币盗窃案。
币安将入侵入口追溯到一名DevOps工程师遭入侵的笔记本电脑；攻击者由此进入一个能够提交未经授权的提款交易的服务容器。
币安没有发现钱包私钥泄露的迹象，因此攻击者显然是利用了提款软件，而非直接控制了加密货币。
资金跨区块链转移期间，合作伙伴已冻结约30亿美元；币安承诺弥补用户的全部损失。
TRM Labs将这起盗窃案归因于朝鲜黑客组织TraderTraitor；该组织曾制造此前的纪录，即2025年从Bybit窃取15亿美元的案件。
币安重建提款服务期间，提款仍处于暂停状态；其关于用户资金安全的说法尚待更新后的储备证明予以证实。
调查人员还发现了其他入侵点，因此币安现在必须解释，1名工程师的访问权限为何能触及转移数十亿美元资金的系统。
币安的初步调查显示，这起安全事件可能涉及一名DevOps工程师的笔记本电脑遭入侵，使攻击者得以进入一个服务容器并提交未经授权的提款交易。我们尚未发现任何钱包私钥泄露的证据。待调查完成、事实得到充分核实后，我们将分享详细的技术事后分析。
估计总影响约为63亿美元。我们已与区块链合作伙伴协作冻结受影响资产，迄今已在链上冻结约30亿美元。
币安将使用SAFU基金和公司资金弥补全部损失。用户资金是安全的。补救工作完成后，我们还将发布更新后的储备证明。
作为即时预防措施，币安已：
- 在安全检查完成前暂时暂停存款和提款；
- 撤销受影响地址的授权；
- 与执法机构及区块链情报合作伙伴合作，追踪并追回资金。
我们的团队正昼夜不停地工作，以安全、彻底地解决这一问题。我们正与执法合作伙伴密切合作，确认这些犯罪分子的身份并将其绳之以法。
请仅通过币安官方渠道获取最新消息。如有其他问题，请随时联系币安客户支持。
https://t.co/ywB2mKFy0p
原文
Binance's initial investigation suggests that the security incident may involve a compromised DevOps engineer’s laptop, which allowed an attacker to gain access to a service container and submit unauthorized withdrawal transactions. We have found no evidence of any wallet private key leak. We will share a detailed technical post-mortem once the investigation is complete and the facts are fully verified. The estimated total impact sits at around $6.3B. We have worked with blockchain partners to freeze affected assets, with ~$3 billion frozen on-chain so far. Binance will cover all losses from the SAFU fund and the company’s funds. User funds are safe. We will also publish an updated Proof of Reserves once the remediation is complete. As an immediate precaution, Binance has: - temporarily suspended deposits and withdrawals while security checks are completed; - revoked the affected address authorisation; - engaged law enforcement and blockchain intelligence partners to trace and recover funds. Our teams are working around the clock to resolve this issue safely and thoroughly. We are working closely with our law enforcement partners to confirm the identity of these criminals and bring them to justice. Please rely only on official Binance channels for updates. Please feel free to contact Binance Customer Support if you have any further questions. https://t.co/ywB2mKFy0p