转自:Odaily星球日报
作者 :秦晓峰
北京时间今天上午 10 点,链上数据提供商 Cryptoquant 发文表示,加密交易所 Kucoin 疑似被盗。
“看起来 Kucoin 似乎被攻击了。通常,交易所在被黑客攻击后,比特币流出会迅速增加,然后变成零。自北京时间 9 月 26 日凌晨 4 时起,Kucoin流出持续为零。“Cryptoquant 解释称。
作为一家老牌交易所,Kucoin 被盗消息立即在社群流传。加之一些 Kucoin 用户无法提币,更是增加了被盗消息的真实性。
虽然最初 Kucoin 官方客服回应称只是系统问题,暂停充提币,以求缓解恐慌。但最终,Kucoin CEO 还是承认,确实遭遇了黑客攻击。
Kucoin 究竟为何遭遇攻击,损失了多少加密货币?这些被盗资金会对市场造成什么影响?Kucoin 能否承担用户损失,避免成为第二个「Mt.Gox」?
(1)事件回顾:热钱包私钥泄露
在 Cryptoquant 发布消息后,10 点 41 分,Kucoin 官方发布公告称:自北京时间今天 3 点起,检测到一些大额提款,不过并未解释具体原因,有没有证实是否被盗。
紧接着,有用户发现,Kucoin 暂停了充提币。官方客服在电报群中解释称,只是因为系统故障,并建议用户“在这种情况下,不应该进行充提币”。
这是什么情况?官方客服「暧昧」的解释,似乎为「资金被盗」增加了一些可信度。
不过,虽然官方关闭了提币功能,还是有用户发现,Kucoin 账户还在不断往外转出资金,疑似黑客转移资产,再一次证实了被盗的可能性,引起社群恐慌。
两小时后,北京时间中午 12 点半,Kucoin 首席执行官 Johnny Lyu 进行了直播,证实了被盗的真实性,并提供了一份该事件的时间表(以下时间均为北京时间):
- 02:51,首次收到来自风险管理系统的警报,监测到所有异常交易均来自此钱包地址:0xeb31973e0febf3e3d7058234a5ebbae1ab4b8c23;
- 03:01,收到了风险管理系统发出的有关热钱包余额异常的警报,成立了一个特别团队来应对这一事件。
- 03:20,KuCoin 运营团队紧急关闭了钱包服务器,发现关闭后仍然存在异常交易的情况。
- 04:20,KuCoin 钱包团队开始将剩余资产从热钱包转移到冷存储中。
- 04:25,KuCoin 钱包团队、运营团队和安全团队开始根据收集到的信息和线索调查此事件。
- 04:40,KuCoin 团队为此事件的重要合作伙伴和做市商建立了沟通渠道。
- 04:50,KuCoin 钱包团队将大部分剩余资产从热钱包转移到了冷钱包。
Johnny Lyu 表示,之所以发生资产被盗,主要是热钱包私钥泄露,具体原因还在调查。另外,本次主要涉及币种为 BTC、ETH 以及一些 ERC20 代币;至于具体价值,正在清算尚未公布,“受影响的资金仅占总资产的一小部分”。
但根据 Decrypt 报道,Kucoin 本次损失在 1.5 亿美元左右。文章称,被 Kucoin 标记异常的地址中,从今天凌晨至今累计收到 11486 枚ETH、458866 枚 GLA、28443 枚 HAT、21660273 枚 OCEAN、29999 枚 CHR,另外,还有一定数量的 ARPA、 AOA、MKR、OMG、ZRX、SXP 等代币,累计价值 1.46 亿美元。
那么,在这次安全事故中受到损失的用户,Kucoin 是否会赔偿?
Johnny Lyu 给出肯定回复。“2018 年初开始,Kucoin 就建立了保险基金来处理此类意外安全问题。如果任何用户资金受此事件影响,KuCoin和我们的保险资金将完全覆盖。”
(2)CeFi 联手阻止黑客洗钱
对于非事件亲历者来说,最关心莫过于 Kucoin 被盗资产是否会砸盘影响市场。
从目前的情况来看,投资者暂可不必担心。
根据 Johnny Lyu 所述,事发后,Kucoin 第一时间联系了多家加密平台,请求帮助冻结被盗资金,包括 Binance、Huobi、OKEx、Bybit、Upbit、Bibox、Gate、MXC、BitMax、BigONE、BKEX、BitZ、HBTCHoo、Crypto.com、Bingbon、Renrenbit、LBank、Max / Maicoin、CoinW 等。
今天上午,包括抹茶、Gate.io 在内的多家交易所发布公告,暂停相关被盗代币的充提币。得益于此,相关代币价格并未出现暴跌,加密市场也并未受到此次被盗事件影响。
就连一向置身事外的 Tether 这次也开始出手打击黑客。
Bitfinex 首席技术官 Paolo Ardoino 发文称,Bitfinex 已经冻结 KuCoin 交易所流出的 1300 万EOS 链上 USDT,Tether 也已经冻结攻击地址中的逾 2000 万以太坊链上 USDT。
对于为何出手相助,Paolo Ardoino 解释称:“Tether USDT 与其他稳定币一样是中心化稳定币,我们对用户、监管机构和执法部门负有责任,我们有严格的规则和行动的参数。”
(3)安全警钟长鸣
近年来,中心化交易所安全事故频发。
前有币安被盗 7000 多个比特币,近期中币网也因技术故障被撸走一些加密资产,再到今天的 Kucoin 私钥丢失。
一次次事故,暴露出中心化交易所在管理以及技术层面的漏洞,值得警惕。当然这并不是说去中心化交易所一定是安全的,DEX 也同样存在智能合约漏洞风险。
特别是这次的 Kucoin 事件,仍然留下很多谜团。比如,热钱包私钥是怎么泄漏的,被谁泄漏的?这次事故究竟还会不会再次重演?另外,黑客为什么第一时间转至中心化交易所洗钱,背后的身份能否查出?
Odaily星球日报也将继续关注事件动向。
本文链接:https://www.LBRCHINA.com/article/651273
转载请注明文章出处
免责声明:本文转载自互联网,经授权后发布,版权归原作者所有,转载请联系原作者并获许可。文章观点仅代表作者本人,不代表Libra资讯立场。若内容涉及投资建议,仅供参考勿作为投资依据。投资有风险,入市需谨慎。
评论列表(51条)
It’s hard to come by well-informed people about this topic, but you sound like
you know what you’re talking about! Thanks
excellent publish, very informative. I ponder why the opposite experts of
this sector don’t realize this. You must
continue your writing. I’m sure, you’ve a huge readers’ base already!
I blog quite often and I really thank you for your information. This article
has really peaked my interest. I will bookmark your
website and keep checking for new details about once a week.
I subscribed to your Feed as well.
Heya i’m for the first time here. I found this board and I find It really useful
& it helped me out a lot. I hope to give something back and
help others like you aided me.
Hi there, I found your site by the use of Google even as
looking for a related subject, your website got
here up, it seems great. I have bookmarked it in my google bookmarks.
Hello there, just changed into alert to your blog thru Google, and found that it
is truly informative. I’m gonna watch out for brussels. I will appreciate should you continue this in future.
Lots of folks might be benefited out of your writing.
Cheers!
Good web site you have here.. It’s difficult to find high-quality writing like yours these days.
I seriously appreciate individuals like you! Take care!!
I am curious to find out what blog system you
are using? I’m having some small security problems with
my latest site and I would like to find something
more safe. Do you have any suggestions?
Hi there! Someone in my Myspace group shared this site with
us so I came to look it over. I’m definitely enjoying
the information. I’m book-marking and will be tweeting this to my followers!
Fantastic blog and fantastic style and design.
Hurrah! In the end I got a web site from where I know how to really take helpful facts concerning my study and knowledge.
There is definately a great deal to learn about this subject.
I love all of the points you made.
Whoa! This blog looks exactly like my old one!
It’s on a totally different topic but it has pretty
much the same page layout and design. Excellent
choice of colors!
each time i used to read smaller articles or reviews that
also clear their motive, and that is also happening with this paragraph which I am reading here.
I visit day-to-day some websites and websites to read articles or reviews, but this weblog provides feature based writing.
whoah this weblog is wonderful i really like reading your posts.
Keep up the great work! You already know, lots of people are searching around for this information, you could aid them greatly.
The firm, synonymous with sports benefits, becomes the first sponsor of LaLiga in the Sports Scoring category.
I have to thank you for the efforts you’ve put in penning
this website. I am hoping to see the same high-grade content from you later on as well.
In fact, your creative writing abilities has encouraged me to
get my own website now 😉
NY State Senator Joseph Addabbo Jr. has speculated in the
past that the Super Bowl or March Madness could be optimistic launch dates.
I like the helpful info you provide in your articles. I’ll bookmark your
blog and check again here regularly. I am quite sure I
will learn a lot of new stuff right here! Good luck for the next!
First off I would like to say great blog!
I had a quick question that I’d like to ask if you do not mind.
I was curious to find out how you center yourself
and clear your mind prior to writing. I have had a tough time clearing my mind in getting my ideas out there.
I truly do enjoy writing but it just seems like the
first 10 to 15 minutes are usually lost simply just trying to
figure out how to begin. Any suggestions or hints?
Thank you!
I just couldn’t go away your web site before suggesting that I really enjoyed the standard info a person provide on your
visitors? Is gonna be back ceaselessly to
inspect new posts
It also characteristics symbols and icons enhancing the snowy winter theme of the slot.
The sportsbooks will set a line and you can bet on either more than or below.
I was just a bettor.” But soon the investigators had been also tapping Spanky’s
phones, believing him to be a important illegal bookmaker.
Hello there I am so grateful I found your site, I really found you
by error, while I was browsing on Digg for something else, Anyways I am here now and would just like to say kudos for a marvelous post
and a all round exciting blog (I also love the theme/design),
I don’t have time to read through it all at the moment but I have book-marked it and also added your RSS feeds, so when I have time I will be back to read more,
Please do keep up the great job.
These sites have state of the art mobile betting apps waiting for you,
enabling you to take your betting on the go with you.
The craze for 3-Card Baccarat is covered in Macau, Russia
and the entire Asian continent.
You can redeem points for items like free of
charge bets and other perks.
Hi there Dear, are you actually visiting this web page on a
regular basis, if so afterward you will absolutely obtain fastidious experience.
If the Lions had been to win, 20-14, it would be specifically
six and a push, so you would get your income back.
Men and women that gambled on those websites would in turn by gambling on the tribe’s land by proxy.
Write more, thats all I have to say. Literally, it seems as though you relied on the
video to make your point. You clearly know what youre talking about, why waste your intelligence
on just posting videos to your blog when you could be giving us something informative to read?
Hello just wanted to give you a brief heads up and let you know a few of the pictures aren’t loading correctly.
I’m not sure why but I think its a linking issue.
I’ve tried it in two different browsers and both show the same outcome.
Howdy! I know this is somewhat off topic but I was wondering
if you knew where I could find a captcha plugin for my comment form?
I’m using the same blog platform as yours
and I’m having trouble finding one? Thanks a
lot!
Pretty nice post. I simply stumbled upon your weblog and wished to mention that I’ve really loved browsing your weblog posts.
After all I’ll be subscribing to your feed and I am hoping you write once more very soon!
We stumbled over here by a different website and thought I might as well check things out.
I like what I see so now i’m following you. Look forward to exploring your web page repeatedly.
Good post. I learn something totally new and challenging
on websites I stumbleupon on a daily basis. It will always be helpful to
read through content from other writers and practice something from other
sites.
After I initially left a comment I seem to have clicked
on the -Notify me when new comments are added-
checkbox and now each time a comment is added I recieve 4 emails with the same comment.
There has to be a way you can remove me from that service?
Thanks a lot!
Greetings! Very helpful advice within this article!
It is the little changes that produce the largest changes.
Thanks for sharing!
Hello There. I found your weblog the usage of msn. That is a really well written article. I will be sure to bookmark it and come back to read more of your useful information. Thanks for the post. I will definitely comeback.
The data mentioned in the report are several of the most effective readily available
Thanks for all your efforts that you have placed in this very worthwhile content.
Remarkable! Its really amazing piece of writing, I have got much
clear idea on the topic of from this post.
Very good info. Lucky me I found your blog by chance (stumbleupon).
I have book marked it for later!
I seriously love your site.. Pleasant colors & theme.
Did you build this web site yourself? Please reply back as I’m planning to create my own personal blog
and would like to learn where you got this from or just
what the theme is named. Appreciate it!
Hey very interesting blog!
Thanks for the marvelous posting! I truly enjoyed reading it, you may be a great author.I will ensure that I
bookmark your blog and definitely will come back at some point.
I want to encourage you to definitely continue your great work, have a nice day!
Thank you, I’ve recently been searching for information about this topic for
ages and yours is the best I’ve found out so far. But, what in regards to the bottom line?
Are you certain concerning the source?
Hey this is somewhat of off topic but I was wondering if blogs use WYSIWYG editors or if you have to manually code
with HTML. I’m starting a blog soon but have no coding experience so I wanted to get advice from someone with
experience. Any help would be greatly appreciated!
Hi mates, fastidious post and pleasant arguments commented here, I am actually enjoying by these.
Hi, I do think this is a great site. I stumbledupon it 😉 I am going to come back yet again since I bookmarked it.
Money and freedom is the best way to change, may you be rich and continue
to help others.
It’s going to be finish of mine day, except before ending I
am reading this great article to improve my know-how.