币安详述60亿美元黑客攻击事件

美国时间11月4日，币安发布声明

NEW YORK, Nov 4 — Binance released on Tuesday a detailed investigation into the US$6 billion (RM24.4 billion) hack that occurred on its platform on May 2, 2023. The investigation revealed that the hack was the result of a fake interview conducted by a hacker, which allowed the attacker to gain access to the platform and steal a significant amount of cryptocurrency.

假采访导致重大损失

The hack, which occurred on May 2, 2023, was initiated through a fake interview conducted by a hacker. The attacker impersonated a senior Binance employee and tricked a Binance employee into providing access credentials. This allowed the hacker to gain entry into the platform and steal a total of 7,000 Bitcoin (BTC) and 50,000 Ethereum (ETH), among other cryptocurrencies, valued at approximately US$6 billion at the time of the attack.

详细调查揭示黑客手法

Binance's investigation, which lasted for four hours, uncovered the intricate details of the hack. The hacker used social engineering tactics to impersonate a senior Binance employee and tricked a Binance employee into providing access credentials. The attacker then used these credentials to gain access to the platform and execute the theft. The investigation also revealed that the hacker had prior knowledge of Binance's internal systems and processes, which facilitated the attack.

影响及应对措施

The hack has had significant implications for Binance and the cryptocurrency community as a whole. The loss of such a large amount of cryptocurrency has raised concerns about the security of cryptocurrency exchanges and the potential for similar attacks in the future. Binance has taken steps to address the issue, including enhancing its security protocols and conducting a thorough review of its internal processes. The company has also offered compensation to affected users and is working closely with law enforcement agencies to track down the hacker.

结语

Binance's detailed investigation into the hack provides valuable insights into the tactics used by hackers and the importance of robust security measures in the cryptocurrency industry. The incident serves as a reminder of the need for vigilance and continuous improvement in security practices to protect users and their assets.