Layer 1 加密貨幣衍生性商品平台 Hyperliquid 在風險暴露後出現資金流出高峰

一名安全專家透露，與北韓（朝鮮民主主義人民共和國）有關的駭客已經使用Hyperliquid 平台至少幾個月了，之後，Layer 1 加密貨幣衍生品平台Hyperliquid 遭受了巨大打擊，人們對該平台的安全性日益擔憂。

After a security researcher revealed that hackers linked to North Korea (DPRK) have been using the Hyperliquid platform for months, the Layer 1 cryptocurrency derivatives platform has seen outflows peak.

一名安全研究人員透露，與北韓（DPRK）有關的駭客幾個月來一直在使用 Hyperliquid 平台，之後，Layer 1 加密貨幣衍生性商品平台出現了資金外流高峰。

Despite the news, HYPE, the platform's native token, continues to trade in the green, up nearly 4% in the last 24 hours. However, the daily chart shows that the crypto coin has been very volatile in the past day since news of the security concerns spread on social media.

儘管有這一消息，該平台的原生代幣 HYPE 仍繼續上漲，在過去 24 小時內上漲了近 4%。然而，日線圖顯示，自從安全疑慮的消息在社群媒體上傳播以來，加密貨幣在過去一天中一直非常波動。

Hyperliquid Outflows Hit Record Highs

超流動性流出量創歷史新高

Outflows on Hyperliquid reached an all-time high of $502.71 million on Monday, according to Dune Analytics, after Metamask security researcher Tay Monahan posted onchain data that appeared to show DPRK-linked hackers using the platform.

據 Dune Analytics 稱，在 Metamask 安全研究員 Tay Monahan 發布的鏈上數據似乎顯示與北韓有關的駭客正在使用該平台後，Hyperliquid 的資金外流週一創下了 5.0271 億美元的歷史新高。

DPRK’s trading career is…uh….going…..🙈

北韓的貿易生涯是…呃….正在進行…..🙈

tbh if i was the dude managing Hyperliquid's 4 validators (or those fucking ghetto ass binaries on gh) I would be shitting my pants right now

說實話，如果我是管理 Hyperliquid 的 4 個驗證器（或者 gh 上那些該死的貧民區二進位）的傢伙，我現在就會尿褲子了

Hyperliquid dudes dont seem worried at all though so im sure its fine. 🫠 pic.twitter.com/JrrU7t1sJe

高流動性的傢伙似乎一點也不擔心，所以我確信它沒問題。 🫠 pic.twitter.com/JrrU7t1sJe

"Hyperliquid dudes don't seem worried at all though so I'm sure it's fine," Monahan said in a series of posts on X Monday. "DPRK doesn't trade. DPRK tests," she added, suggesting that accounts used by North Korea-linked hackers "test" the security of crypto platforms.

莫納漢在 X 星期一的一系列帖子中表示：“超液體傢伙似乎一點也不擔心，所以我確信這沒什麼問題。” 「北韓不進行交易。北韓進行測試，」她補充道，並暗示與北韓有關的駭客使用的帳戶「測試」加密平台的安全性。

my offer from 2 weeks ago still stands @Hyperliquid

我兩週前的報價仍然有效@Hyperliquid

I'm still happy to do it async or via a call.

我仍然很樂意異步或通過調用來完成它。

i can even give you one of my super nice happy colleagues if you dont like me.

如果你不喜歡我，我甚至可以給你一個超級友善、快樂的同事。

but a massive amt of harm will come to people if you dont harden your ass asap. pic.twitter.com/OxLlB4lygE

但如果你不盡快堅定自己的立場，就會帶給人們巨大的傷害。 pic.twitter.com/OxLlB4lygE

Monahan also revealed that she had offered to discuss the matter with the Hyperliquid team two weeks ago. She said that her offer to provide security advice to the team still stands. "A massive amount of harm will come to people if you don't harden your a** asap," she added.

莫納漢也透露，她兩週前已提出與 Hyperliquid 團隊討論此事。她表示，她向團隊提供安全建議的提議仍然有效。 「如果你不盡快讓自己的屁股變硬，將會給人們帶來巨大的傷害，」她補充道。

On its Discord channel, Hyperliquid said it was aware of reports regarding "activity by supposed DPRK addresses," but that there has been no exploit so far and "all user funds are accounted for."

Hyperliquid 在其 Discord 頻道上表示，它知道有關「所謂的 DPRK 地址的活動」的報告，但到目前為止尚未發現任何漏洞，並且「所有用戶資金均已入帳」。

can everyone calm the fuck down now

現在大家都可以冷靜下來嗎

hyperliquid pic.twitter.com/0Dr2NFr5pN

超液體 pic.twitter.com/0Dr2NFr5pN

It also said it had contacted "trusted parties" to confirm that the platform was following industry best practices, rather than "someone claiming to be a security party."

它還表示，它已經聯繫了“受信任的各方”，以確認該平台遵循行業最佳實踐，而不是“自稱是安全方的人”。

Some Crypto Users Still Concerned

一些加密貨幣用戶仍然擔心

Despite Hyperliquid's statement on the matter, there are still concerns that the platform may be too complacent. "A thief never says he is a thief," said one user, suggesting that Hyperliquid provided a "self-signed clearance certificate" about its platform's security instead of a legitimate clearance from a trusted blockchain security firm or solutions provider.

儘管 Hyperliquid 就此事發表了聲明，但仍有人擔心該平台可能過於自滿。一位用戶表示：“小偷永遠不會說自己是小偷。”他建議Hyperliquid 提供了有關其平台安全性的“自簽名許可證書”，而不是來自值得信賴的區塊鏈安全公司或解決方案提供商的合法許可。

This is concerning. Every team should take this seriously. You cannot assume support from another team if it is uncertain.

這是令人擔憂的。每個團隊都應該認真看待這一點。如果不確定，您就不能假設其他團隊的支持。

Some prominent crypto players, such as PulseChain MPC wallet Pulse Wallet, have also expressed concern over the issue.

一些著名的加密貨幣玩家，例如 PulseChain MPC 錢包 Pulse Wallet，也表達了對此問題的擔憂。

.@chameleon_jeff please meet with @tayvano_ , she and the team don’t mess around and have user’s best interest first. Take it from someone who had first-hand experience with North-Korea’s Lazarus Group. They are patient and very sophisticated.

.@chameleon_jeff 請與@tayvano_ 會面，她和團隊不會亂來，首先要考慮用戶的最大利益。這是一位對朝鮮拉撒路集團有第一手經驗的人的說法。他們很有耐心，而且非常老練。

Reach out to her. @tayvano_ is… https://t.co/000ePq000e

向她伸出援手。 @tayvano_ 是… https://t.co/000ePq000e

News of the presence of North Korea-linked exploiters comes months after prominent blockchain sleuth ZachXBT revealed how Lazarus Group, a notorious hacking group tied to the country, laundered some $200 million in stolen crypto during its three-year hacking spree across the crypto space.

幾個月前，著名區塊鏈偵探 ZachXBT 披露了與北韓有關的臭名昭著的駭客組織 Lazarus Group 如何在加密貨幣領域的三年駭客熱潮中洗掉了價值約 2 億美元的被盜加密貨幣。

Among the crypto security breaches that security experts have linked to Lazarus Group are the hackings of crypto exchange CoinMetro, which lost $750,000 in digital assets, and Canadian exchange CoinBerry, which had $370,000 in Bitcoin and Ethereum wiped out.

安全專家認為，與Lazarus Group 相關的加密安全漏洞包括加密貨幣交易所CoinMetro 遭受駭客攻擊，導致75 萬美元的數位資產損失，以及加拿大交易所CoinBerry 的駭客攻擊，導致37 萬美元的比特幣和以太坊損失殆盡。

It remains to be seen how the news will further affect Hyperliquid and whether it will soon release official documentation on its work toward securing the platform.

該訊息將如何進一步影響 Hyperliquid，以及它是否很快就會發布有關其平台安全工作的官方文檔，還有待觀察。