超液體：面臨前所未有的網路威脅的危機平台

2024 年 12 月 23 日，將載入加密貨幣衍生性商品平台 Hyperliquid 的歷史。事實上，這一天流動性大量外流

Recent events on the Hyperliquid platform have highlighted a growing threat in the crypto universe: the involvement of North Korean hackers.

Hyperliquid 平台上最近發生的事件凸顯了加密世界中日益嚴重的威脅：北韓駭客的參與。

Over $256 million was withdrawn from the platform in record time, triggering major concerns among investors and industry observers.

在創紀錄的時間內從該平台撤回了超過 2.56 億美元，引發了投資者和行業觀察人士的重大擔憂。

Hyperliquid, a platform in crisis facing an unprecedented cyber threat

Hyperliquid，一個面臨前所未有的網路威脅的危機平台

December 23, 2024, will be marked in the history of the crypto derivatives platform Hyperliquid. Indeed, this day saw a massive exodus of liquidity, reaching $256 million in net outflows.

2024 年 12 月 23 日，將載入加密貨幣衍生性商品平台 Hyperliquid 的歷史。事實上，這一天流動性大量外流，淨流出達 2.56 億美元。

But what caused such a panic among platform users? According to experts, the seed was planted as early as October, when hackers linked to North Korea began carrying out suspicious transactions on the platform.

但到底是什麼原因導致平台用戶如此恐慌呢？據專家稱，這一種子早在 10 月就已埋下，當時與北韓有關的駭客開始在該平台上進行可疑交易。

The alert was raised by Tay Monahan, a security researcher at Metamask, who published an analysis on X (formerly Twitter).

該警報是由 Metamask 安全研究員 Tay Monahan 提出的，他在 X（前身為 Twitter）上發表了分析。

In his words, the addresses associated with the Democratic People’s Republic of Korea (DPRK) are not just conducting simple exchanges, but are testing vulnerabilities.

用他的話來說，與朝鮮民主主義人民共和國（DPRK）相關的地址不僅僅是進行簡單的交換，而是在測試漏洞。

This statement sowed panic, prompting a massive withdrawal by platform users.

此言論引發恐慌，導致平台用戶大規模退出。

Hyperliquid attempted to calm the storm via a statement on Discord, asserting that no direct exploit had been confirmed and that user funds were intact.

Hyperliquid 試圖透過在 Discord 上發表聲明來平息這場風暴，聲稱尚未確認直接利用行為，並且用戶資金完好無損。

Yet, distrust persists, fueled by statements suggesting that Hyperliquid’s infrastructure relies on only four validators. A centralization perceived as a major flaw in the blockchain world.

然而，不信任仍然存在，暗示 Hyperliquid 的基礎設施僅依賴四個驗證器的聲明加劇了這種不信任。中心化被認為是區塊鏈世界的一個主要缺陷。

Crypto and North Korean threat: a worrying reality

加密貨幣和北韓威脅：令人擔憂的現實

North Korea is no stranger to hacking activities in the crypto sector. In 2024, groups like Lazarus amassed $1.3 billion in stolen cryptocurrencies, a figure that doubled within a year.

北韓對加密貨幣領域的駭客活動並不陌生。 2024 年，Lazarus 等組織竊取的加密貨幣價值達 13 億美元，這一數字在一年內翻了一番。

These cyberattacks would serve to circumvent international sanctions and to finance a regime in search of currencies.

這些網路攻擊將有助於規避國際制裁並為尋找貨幣的政權提供資金。

In the case of Hyperliquid, this North Korean involvement revealed the vulnerability of the crypto market to organized cyber threats.

就 Hyperliquid 而言，北韓的參與揭示了加密貨幣市場面對有組織網路威脅的脆弱性。

The repercussions were not limited to withdrawals. The native token HYPE fell by 20%, dropping to $28 after reaching an all-time high of $35 shortly before the revelations.

影響不僅限於撤回。原生代幣 HYPE 在爆料前不久達到 35 美元的歷史高點後，下跌了 20%，跌至 28 美元。

This plunge reflects a loss of confidence that could have a lasting impact on the platform.

這次暴跌反映出信心的喪失，可能會對平台產生持久的影響。

Experts, while sometimes criticizing Monahan’s alarmist tone, acknowledge the importance of an open debate on security.

專家雖然有時會批評莫納漢危言聳聽的語氣，但也承認就安全問題​​進行公開辯論的重要性。

Laurence Day, co-founder of Wildcat Labs, summed up the situation: “The emergence of Kim Jong-un’s henchmen in the crypto world is always a warning signal.”

Wildcat Labs 聯合創始人 Laurence Day 總結了這一情況：“加密世界中金正恩追隨者的出現始終是一個警告信號。”

Solutions, but persistent challenges

解決方案，但挑戰仍存在

To limit upcoming losses, experts suggest two defense strategies.

為了限制即將到來的損失，專家提出了兩種防禦策略。

The first, put forward by the pseudonymous developer Cygaar, relies on the quick intervention of Circle, the issuer of USDC, which could freeze the stolen funds by blacklisting suspicious addresses.

第一個是由匿名開發者Cygaar提出的，依靠USDC發行者Circle的快速乾預，可以透過將可疑地址列入黑名單來凍結被盜資金。

This approach would help limit the damage, but it requires flawless responsiveness.

這種方法將有助於限制損害，但它需要完美的回應能力。

The second measure, more radical, would involve rolling back (reverting) on the Arbitrum chain, which hosts Hyperliquid.

第二項措施更為激進，涉及在託管 Hyperliquid 的 Arbitrum 鏈上進行回溯（復原）。

However, this solution raises many controversies and is only considered in the presence of “existential” threats.

然而，該解決方案引起了許多爭議，並且僅在存在「存在」威脅的情況下才被考慮。

In conclusion, this episode illustrates the security challenges facing the crypto universe.

總之，這一集說明了加密世界面臨的安全挑戰。

While platforms like Hyperliquid attract significant capital, they also become prime targets for malicious actors. Vigilance and technological innovation remain essential to protect an ecosystem still fragile in the face of cyber threats.

雖然像 Hyperliquid 這樣的平台吸引了大量資本，但它們也成為惡意行為者的主要目標。為了保護在網路威脅面前仍然脆弱的生態系統，保持警惕和技術創新仍然至關重要。

Meanwhile, Trump promises strong measures upon his inauguration.

同時，川普承諾就職後將採取強而有力的措施。