Poloniex 駭客竊取價值 3,200 萬美元的比特幣

臭名昭著的 Poloniex 駭客在向一個地址進行了 486.62 BTC（3,080 萬美元）的巨額交易後，轉移了 501 BTC（3,200 萬美元）來隱藏被盜資金。區塊鏈調查人員 PeckShieldAlert 和其他人正在追蹤資金的動向，同時 Poloniex 正在與執法機構合作識別並逮捕肇事者。

Revelations Surface: Poloniex Hacker Diverts Millions in Stolen Bitcoin

揭露真相：Poloniex 駭客轉移了數百萬被盜比特幣

In a recent development, blockchain analytics firm PeckShieldAlert unveiled the transfer of 501 Bitcoin (BTC), roughly valued at $32 million, from the notorious Poloniex hacker into three new wallet addresses. This move is believed to be an attempt to obscure the source of the stolen funds, following the hacker's execution of the largest Bitcoin transaction on record, involving the theft of 486.62 BTC (equivalent to $30.8 million) to a single address. Additionally, two smaller amounts of 10 BTC and 5 BTC were also transferred to new wallets, further obfuscating the trail of stolen assets.

在最近的一項進展中，區塊鏈分析公司 PeckShieldAlert 公佈了 501 個比特幣 (BTC) 從臭名昭著的 Poloniex 駭客轉移到三個新錢包地址的情況，價值約 3,200 萬美元。據信，此舉是為了掩蓋被盜資金的來源，此前黑客執行了有史以來最大的比特幣交易，涉及到單一地址盜竊 486.62 BTC（相當於 3080 萬美元）。此外，兩筆較小金額的 10 BTC 和 5 BTC 也被轉移到新錢包中，進一步混淆了被盜資產的痕跡。

The incident traces its roots to a hot-wallet hack on the Poloniex exchange on November 10, 2023, resulting in a loss of over $33 million. Since then, PeckShieldAlert and other on-chain analysts, such as Tom Wan, have been meticulously tracking the movements of the stolen funds and providing valuable insights into the hacker's activities.

該事件的根源可追溯至 2023 年 11 月 10 日在 Poloniex 交易所發生熱錢包駭客攻擊，造成超過 3,300 萬美元的損失。從那時起，PeckShieldAlert 和 Tom Wan 等其他鏈上分析師一直在仔細追蹤被盜資金的動向，並提供有關駭客活動的寶貴見解。

Laundering Attempts and Investigations

洗錢嘗試和調查

In the aftermath of the Poloniex breach, PeckShieldAlert and Lookonchain analysts discovered the hacker's attempts to launder the stolen funds through exchanges of ETH and TRX. On November 18, 2023, it was disclosed that Poloniex had identified the hacker and was cooperating with law enforcement agencies in China, Russia, and the United States to apprehend the perpetrator. Furthermore, a substantial white hat bounty of $10 million was offered in exchange for the return of the stolen funds. Despite these concerted efforts, Poloniex has yet to recover the stolen assets.

Poloniex 違規事件發生後，PeckShieldAlert 和 Lookonchain 分析師發現駭客試圖透過 ETH 和 TRX 交易來洗錢被盜資金。 2023 年 11 月 18 日，有消息指出 Poloniex 已確定駭客身份，並正在與中國、俄羅斯和美國的執法機構合作逮捕肇事者。此外，白帽公司還提供了 1000 萬美元的巨額賞金，以換取被盜資金的歸還。儘管做出了這些共同努力，Poloniex 仍未追回被盜資產。

Concerns over Liquidation

對清算的擔憂

The recent transfer of BTC by the hacker has raised concerns about their potential plans to liquidate the funds in the future, potentially complicating the process of tracking and reclaiming the stolen assets. The ability to convert stolen cryptocurrency into fiat currency can make it more challenging for investigators to trace the funds and pursue legal action against the perpetrator.

駭客最近轉移 BTC 的行為引起了人們對其未來清算資金的潛在計劃的擔憂，這可能會使追蹤和收回被盜資產的過程變得複雜化。將被盜加密貨幣轉換為法定貨幣的能力可能使調查人員追蹤資金並對犯罪者採取法律行動變得更具挑戰性。

Industry-Wide Losses and Trends

全行業的損失和趨勢

During the first quarter of 2024, the cryptocurrency industry witnessed a surge in losses due to hacking and rug pull incidents. Over 32 such incidents occurred, resulting in losses exceeding $200 million, a 15.4% increase compared to the same period in 2023. However, despite the increased number of incidents, there was a 23% decline in overall losses attributed to hacking and scams in Q1 2024, amounting to approximately $336.3 million. A report by blockchain security firm Immunefi identified 46 hacking incidents and 15 cases of fraudulent activities during this period. Notably, two major projects, Orbit Bridge and Munchables, suffered the most significant losses, totaling $144,480,000 and accounting for 43% of all losses in Q1 alone.

2024年第一季度，由於駭客攻擊和拉扯事件，加密貨幣產業損失激增。此類事件發生超過 32 起，造成損失超過 2 億美元，與 2023 年同期相比增長 15.4% 然而，儘管事件數量有所增加，但第一季度黑客和詐騙造成的總體損失下降了 23%到2024 年，金額約為3.363 億美元。區塊鏈安全公司 Immunefi 的報告指出，在此期間發生了 46 起駭客事件和 15 起詐欺活動案件。值得注意的是，Orbit Bridge 和 Munchables 兩個主要項目遭受的損失最為嚴重，總計 1.4448 萬美元，僅第一季就佔所有損失的 43%。

DeFi Vulnerability and Cybersecurity Challenges

DeFi 漏洞與網路安全挑戰

Decentralized finance (DeFi) platforms have emerged as particularly vulnerable to exploits. Their significant total value locked in Web3 protocols makes them attractive targets for bad actors seeking to exploit vulnerabilities in the system.

去中心化金融（DeFi）平台特別容易受到攻擊。它們鎖定在 Web3 協議中的巨大總價值使它們成為尋求利用系統漏洞的不良行為者的有吸引力的目標。

Ongoing Investigations and Collaboration

持續的調查與合作

The ongoing efforts to track and recover stolen funds in the cryptocurrency industry highlight the challenges faced by exchanges and security experts in combating malicious activities by hackers. Despite advancements in blockchain technology and security measures, hackers continue to exploit vulnerabilities and target lucrative assets within the crypto ecosystem. Collaboration between blockchain investigators, on-chain analysts, and law enforcement agencies is crucial in identifying and apprehending perpetrators involved in cybercrimes.

加密貨幣行業追蹤和追回被盜資金的持續努力凸顯了交易所和安全專家在打擊駭客惡意活動方面面臨的挑戰。儘管區塊鏈技術和安全措施取得了進步，但駭客仍在繼續利用漏洞並瞄準加密生態系統中利潤豐厚的資產。區塊鏈調查人員、鏈上分析師和執法機構之間的合作對於識別和逮捕參與網路犯罪的犯罪者至關重要。

Importance of Enhanced Security

增強安全性的重要性

The rise in hacking incidents and fraudulent activities underscores the importance of robust security protocols and risk mitigation strategies to protect users and assets within the cryptocurrency space. As the industry evolves, stakeholders must remain vigilant and proactive in addressing security threats and enhancing the resilience of blockchain networks to safeguard against malicious actors. By implementing robust security measures and fostering collaboration among various stakeholders, the cryptocurrency industry can strengthen its defenses and minimize the impact of malicious activities.

駭客事件和詐欺活動的增加凸顯了強大的安全協議和風險緩解策略對於保護加密貨幣領域內的用戶和資產的重要性。隨著產業的發展，利害關係人必須保持警惕並積極主動地應對安全威脅並增強區塊鏈網路的彈性，以防範惡意行為者。透過實施強有力的安全措施並促進各利益相關者之間的合作，加密貨幣產業可以加強防禦並最大限度地減少惡意活動的影響。