幣安遭竊後，加密貨幣交易所呼籲迅速強化防禦

作者：漢娜・朗（Hannah Lang）By Hannah Lang

10月30日（路透社）—— 幣安（Binance）遭遇創紀錄的63億美元駭客攻擊，暴露加密貨幣交易所在日益融入主流金融之際的脆弱性。各交易所正迅速採取行動強化防禦，並呼籲整個產業加強資訊共享。Oct 30 (Reuters) - Crypto exchanges are taking quick action to bolster their defenses and urging greater industry-wide information-sharing after a record $6.3 billion hack of Binance exposed their vulnerability just as they become more embedded in mainstream finance.

Coinbase表示，該公司已調整其離線儲存加密貨幣金鑰的系統，「純粹是基於高度審慎」；Kraken則表示，正監測產業事件，以尋找可應用於自身防禦的經驗。Coinbase said it made adjustments to its systems that store cryptocurrency keys offline "solely out of an abundance of caution," while Kraken said it was monitoring industry incidents for lessons it could apply to its defenses.

但分析師與產業高層表示，隨著美國總統川普（Donald Trump）任命的監管官員推動數位資產更深入整合進金融體系，這個過去曾發生多起重大駭客攻擊的產業面臨更高風險，業界必須急迫行動。But the industry will need to move urgently, analysts and industry executives said, as President Donald Trump's regulators promote deeper integration of digital assets into the financial system, raising the stakes for an industry with a history of big hacks.

富蘭克林坦伯頓（Franklin Templeton）加密貨幣主管克里斯・柏金斯（Chris Perkins）表示：「加密貨幣若要充分發揮潛力，就必須立即處理安全問題。」"For crypto to reach its full potential, the security situation must be addressed immediately," said Chris Perkins, Franklin Templeton's head of crypto.

全球最大加密貨幣交易所幣安在週四遭攻擊後暫停提款。分析師將這起攻擊歸咎於北韓，幣安則表示將動用公司資金彌補損失。Binance, the world's largest crypto exchange, halted withdrawals after Thursday's attack — which analysts blamed on North Korea — and said it would use company funds to cover the losses.

幣安共同執行長理查德・鄧（Richard Teng）在X上表示，這起「複雜攻擊」可能始於一名軟體工程師的筆電遭入侵，使駭客得以存取用於處理提款的系統。該公司後來發現更多入侵事件，而用來抹除攻擊痕跡的軟體也阻礙了調查。Binance co-CEO Richard Teng said on X that the “complex attack” may have begun with a compromised software engineer’s laptop, giving hackers access to systems used to process withdrawals. The company later found additional breaches, while software designed to erase traces of the attack hampered the investigation.

競爭對手加密貨幣交易所週五迅速採取行動，加強自身系統，並向客戶保證其代幣安全無虞Rival crypto exchanges moved quickly on Friday to shore up their own systems and to reassure customers that their tokens were safe

Kraken一名發言人表示：「Kraken的全職團隊每天都在尋找潛在弱點。」“Full-time teams at Kraken look for potential vulnerabilities every day,” a Kraken spokesperson said.

儘管產業仍因史上最大規模加密貨幣竊案而震盪，高層仍表示有信心，認為幣安有足夠資源彌補損失，且這起駭客攻擊不會造成更廣泛的金融後果。Still, even as the industry reeled from the biggest cryptocurrency heist of all time, executives expressed confidence that Binance had sufficient resources to cover the losses and that the hack would not have broader financial repercussions.

比特幣週四下跌逾4%，第二大加密貨幣以太幣跌幅超過5%，但兩種代幣週五都收復部分失地。Bitcoin fell more than 4% on Thursday while ether, the second-largest cryptocurrency, fell more than 5%, although both tokens recovered some of that ground on Friday.

加密貨幣公司GSR法務暨策略長喬許・里茲曼（Josh Riezman）表示：「我們預期，整體產業其實不會蒙受重大損失，儘管幣安顯然必須直接處理這起漏洞攻擊。」"Our expectation is the industry writ large will actually not suffer material losses, even though Binance is obviously going to have to deal with the exploit directly," said Josh Riezman, chief legal and strategy officer at crypto firm GSR.

美國區塊鏈分析公司TRM Labs與Chainalysis表示，這起竊案主要在週四晚間約20分鐘內發生，且與過去被歸咎於北韓的攻擊有相似之處。The bulk of the heist unfolded in around 20 minutes late on Thursday and bore similarities to previous attacks blamed on North Korea, according to US blockchain analysis firms TRM Labs and Chainalysis.

北韓一向否認涉入加密貨幣竊案，其駐日內瓦代表團也未回應採訪請求。North Korea routinely denies involvement in cryptocurrency thefts, and its mission in Geneva did not respond to requests for comment.

駭客攻擊涉及社交工程與洗錢HACK INVOLVES SOCIAL ENGINEERING, MONEY LAUNDERING

安全專家表示，儘管仍有許多情況尚不明朗，但這部筆電遭入侵，可能涉及社交工程。社交工程是一種常見手法，駭客會誘騙受害者透露敏感資訊，或授予系統存取權限。While much remains unclear, social engineering, a common tactic in which hackers trick victims into revealing sensitive information or granting access to systems, may have been involved in compromising the laptop, security experts said.

加密貨幣風險基礎設施公司Circuit執行長哈利・唐納利（Harry Donnelly）表示，各公司正計劃加強員工訓練，以防範社交工程攻擊。Harry Donnelly, CEO of Circuit, a crypto risk infrastructure company, said companies are planning more employee training to guard against social engineering attacks.

在這類攻擊中，駭客會趕在交易所發現入侵、代幣發行商凍結資產前，迅速將資金洗白。穩定幣發行商Tether表示，已凍結近15.7億美元與幣安相關的資產；Circle則表示已凍結8億美元。比特幣與以太幣無法被凍結，因為沒有單一實體控制這些幣種。In such attacks, hackers race to launder the funds before the exchange detects the breach and token issuers freeze assets. Stablecoin issuer Tether said it had frozen nearly $1.57 billion linked to Binance, while Circle said it froze $800 million. Bitcoin and ether cannot be frozen because no single entity controls the coins.

Chainalysis表示，駭客似乎正在使用該公司過去未曾見過的複雜洗錢模式。Chainalysis said the hackers appeared to be using sophisticated laundering patterns it had not seen before.

週五，一些加密貨幣交易所高層呼籲，產業應發展協調一致的駭客攻擊偵測系統。On Friday, some crypto exchange executives called for the industry to develop a coordinated hack detection system.

加密貨幣交易所OKX執行長徐明星（Star Xu）在X貼文中表示：「我們需要一套即時警報系統，讓參與者能在駭客攻擊發生時立即分享資訊、協調快速應變，並暫時凍結疑似遭竊資金。」"We need a real-time alert system that allows participants to share information immediately when a hack occurs, coordinate a rapid response, and temporarily freeze suspected stolen funds," said Star Xu, CEO of crypto exchange OKX, in a post on X.

GSR的里茲曼補充說，幣安遭駭事件可能會促使產業採取行動：「在傳統金融與數位資產來到這種交會時刻之際，我認為我們顯然必須持續改進；而我認為，若說這起事件會帶來什麼影響，它將會成為推動改進的催化劑。」GSR's Riezman added that the Binance hack could spur the industry to act: "As we're at this kind of confluence moment for traditional finance and digital assets, I think it's obviously important that we continue to improve, and I think this, if anything, will be a catalyst for that."

（漢娜・朗紐約報導；蜜雪兒・普萊斯（Michelle Price）與艾德蒙・克拉曼（Edmund Klamann）編輯）(Reporting by Hannah Lang in New York; Editing by Michelle Price and Edmund Klamann)