断链情报公司将朝鲜与6.3B黑客入侵宾南斯
一家位于美国的区块链情报公司称一家朝鲜单位很可能是黑客幕后黑手袭击了全世界最大的密码货币交易Binance
Binance 称公司与区块链伙伴合作,冻结了约30亿美元受影响的资产。 称星期五开始为用户收回资产。
密码汇兑称的存款没有受到影响,而提款已暂停,预计在第二天或第二天恢复。 它会覆盖所有的损失。
X上的称公司表示,初步调查表明事件可能涉及一台失密的笔记本电脑,但随后的调查发现了更多的"违规点".
TRM在其网站星期四的一篇文章中将这次袭击归咎于TraderTraitor,称其为朝鲜的精英黑客分队。 "我们很有信心地做出这个判断",公司称。
"一个攻击者在10个区块链上从Binance钱包中移动了约63.6亿美元,其中大部分在大约20分钟后","TRM 称。 这将使黑客最大的密码货币盗窃记录,它称。
去年2月,另一个密码货币交易所比比特被黑客入侵时遭受了15亿美元的打击。 联邦调查局称朝鲜和TraderTraitor负责黑客入侵。
"这次袭击的几个特征与早期与朝鲜相关的抢劫相匹配,包括"Bybit黑客""TRM 称".
板链分析公司Channalysis还相信"Binance黑客"是"可能由朝鲜集团TraderTraitor所为",其共同创始人和CEOJonathan Levin在X上写道。 朝鲜代表朝鲜,朝鲜的官方名称。
被问及与朝鲜的潜在联系,一位Binance 发言人称只是称该公司"与我们的执法伙伴密切合作,确认罪犯的身份并将其绳之以法".
专家说,朝鲜转而秘密黑客和其他非法网络活动,作为急需外币的来源,支持其动荡的经济,并在联合国严厉制裁和其他困难后资助其核计划。
2022年12月,韩国的间谍机构称朝鲜黑客在过去五年中盗取了估计1.5万亿韩元(11亿美元)的密码货币等虚拟资产,仅2022年就盗取了一半以上。 其称朝鲜盗取数字资产的能力被评为世界最佳。
赵昌鹏又名CZ,于2017年成立宾安斯。 2023年,他承认因未能防止平台上洗钱而导致的重罪,并辞去公司CEO职务。 美国总统唐纳德·特朗普于2025年赦免了赵。
赵 Zhao星期四在X上贴出"用户资金是安全的!",但又说被窃"看起来像对宾恩斯的黑客". 他补充说,虽然他不再管理比南斯,"作为股东,我期望所有用户资金都将全部覆盖".
同时,融资质疑为何没有加强批准管制,称 Kok Tin Gan是网络安全公司NyxLab的联合创始人和总裁。
他称提到密码货币钱包持有用户的"私人钥匙",或独特的授权,数字化的
Binance 称在X上"没有发现任何钱包私密密钥泄露的证据",公司将在探测完成后发布更多技术细节。
本文由 AI宝库自动抓取并翻译,版权归原作者所有;如需查看原文请点下方链接。
Blockchain intelligence firms link North Korea to $6.3B hack on Binance
A U.S.-based blockchain intelligence firm says a North Korean unit was likely behind the hack that impacted more than $6 billion on Binance, the world's biggest cryptocurrency exchange.
Binance said it worked with blockchain partners to freeze roughly $3 billion in affected assets. It said Friday that it was beginning to recover assets for users.
The cryptocurrency exchange said deposits were unaffected, while withdrawals have been suspended and are expected to resume in the next day or two. It said it will cover all losses.
The company said on X that an initial investigation suggested the incident may have involved a compromised laptop, but that a subsequent investigation uncovered additional "points of breach."
TRM, in a post on its website Thursday, attributed the attack to TraderTraitor, which it described as North Korea's elite hacking unit. "We make this judgment with high confidence," the firm said.
"An attacker moved approximately USD 6.36 billion out of Binance wallets on ten blockchains, most of it in about 20 minutes," TRM said. That would make the hack the largest cryptocurrency theft on record, it said.
In February last year, another cryptocurrency exchange, Bybit, suffered a $1.5 billion hit when it was hacked. The FBI said North Korea and TraderTraitor were responsible for the hack.
"Several features of this attack match earlier North Korea-linked heists, including the Bybit hack," TRM said.
Blockchain analysis company Chainalysis also believed the Binance hack was "likely done by DPRK group TraderTraitor," its co-founder and CEO Jonathan Levin wrote on X. DPRK stands for the Democratic People's Republic of Korea, North Korea's official name.
Asked about the potential ties to North Korea, a Binance spokesperson said only that the company is "working closely with our law enforcement partners to confirm the identity of the criminals and bring them to justice."
Experts say North Korea has turned to crypto hacking and other illicit cyber activities as a source of badly needed foreign currency to support its troubled economy and fund its nuclear program in the wake of tough U.N. sanctions and other difficulties.
In December 2022, South Korea's spy agency said North Korean hackers had stolen an estimated 1.5 trillion won ($1.1 billion) in cryptocurrency and other virtual assets in the past five years, more than half of it in 2022 alone. It said North Korea's capacity to steal digital assets was considered among the best in the world.
Changpeng Zhao, also known as CZ, founded Binance in 2017. In 2023, he pleaded guilty to a felony linked to failing to prevent money laundering on the platform, and stepped down as the company's CEO. U.S. President Donald Trump pardoned Zhao in 2025.
Zhao posted Thursday on X that "User funds are safe!" but added that the theft "does look like a hack on Binance." He added that while he doesn't manage Binance anymore, "as a shareholder, I expect all user funds will be fully covered."
The event, meanwhile, also raises questions about why stronger approval controls were not in place, said Kok Tin Gan, cofounder and CEO of cybersecurity firm NyxLab.
"This looks like one signature that gave the attacker a never-expiring, full-access token to a Binance hot wallet," he said, referring to cryptocurrency wallets that hold users' "private keys," or unique authorizations, digitally and which are connected to the internet.
Binance said on X it had "found no evidence of any wallet private key leak" and that the company would release more technical details when its probe is complete.
Auto-fetched and translated by AI Gem Box. All rights belong to the original author.