南韓當局認定北韓駭客是 2019 年以太坊重大搶劫案的肇事者

被竊的加密貨幣當時價值 580 億韓元（約 5,570 萬美元），經追踪，是北韓軍事情報機構偵察總局所為。

South Korean authorities have officially identified North Korean hackers as the perpetrators of a major Ethereum heist in 2019, marking a significant breakthrough in the investigation.

韓國當局正式認定北韓駭客是 2019 年以太坊重大竊盜案的肇事者，這標誌著調查取得重大突破。

The stolen cryptocurrency, valued at 58 billion won (approximately $55.7 million) at the time, was traced to North Korea’s Reconnaissance General Bureau, a military intelligence agency. The hackers reportedly infiltrated a South Korea-based exchange to execute the theft.

被竊的加密貨幣當時價值 580 億韓元（約 5,570 萬美元），經追踪，是北韓軍事情報機構偵察總局所為。據報道，駭客滲透到韓國的一家交易所實施盜竊。

Detailing the Hack and the Coordinated Efforts Behind Uncovering the Perpetrators

詳細介紹駭客攻擊以及揭露肇事者背後的協調努力

The National Police Agency revealed that the attackers stole 342,000 Ethereum tokens, now valued at over 1.4 trillion won (approximately $1.05 billion), making this one of the most notable crypto thefts on record.

國家警察局透露，攻擊者竊取了 342,000 個以太坊代幣，目前價值超過 1.4 兆韓元（約 10.5 億美元），使這成為有史以來最引人注目的加密貨幣盜竊案之一。

While the specific exchange targeted was not disclosed, Upbit, a leading South Korean exchange, had reported a similar loss in Ethereum to an unidentified wallet in 2019.

雖然具體的目標交易所沒有披露，但韓國領先的交易所 Upbit 在 2019 年向一個身份不明的錢包報告了類似的以太坊損失。

The hackers laundered over half of the stolen funds through three self-operated crypto exchanges, offering discounts to convert the assets into Bitcoin. The remaining Ethereum was dispersed across 51 other exchanges globally.

駭客透過三個自營加密貨幣交易所洗掉了一半以上的被盜資金，並提供折扣將資產轉換為比特幣。剩餘的以太坊分散在全球 51 個其他交易所。

According to the report, the investigation involved cooperation between South Korean authorities and the US Federal Bureau of Investigation (FBI), which used advanced techniques to track Internet Protocol (IP) addresses and the movement of stolen assets.

報道稱，此次調查涉及韓國當局與美國聯邦調查局（FBI）的合作，美國聯邦調查局使用先進技術追蹤網路協定（IP）位址和被盜資產的動向。

This marks the first time South Korea has definitively linked a crypto exchange cyberattack to North Korea. Local media outlets attributed the operation to the notorious Lazarus and Andariel hacker groups, both tied to North Korea’s Reconnaissance General Bureau.

這標誌著韓國首次明確將加密貨幣交易所網路攻擊與北韓聯繫起來。當地媒體將這次行動歸咎於臭名昭著的 Lazarus 和 Andariel 駭客組織，這兩個組織都與北韓偵察總局有關。

Hackers Pose Persistent Threat To The Crypto Industry

駭客對加密產業構成持續威脅

Notably, this is not the first time North Korean hackers have been linked to the perpetrators behind significant hacking incidents. Over the past years, this group has gained notoriety for targeting cryptocurrency exchanges and financial platforms to fund their country’s operations.

值得注意的是，這並不是北韓駭客第一次與重大駭客事件的肇事者聯繫起來。在過去的幾年裡，該組織因瞄準加密貨幣交易所和金融平台為其國家運營提供資金而聲名狼藉。

While authorities do make efforts to recover stolen funds from these notorious hackers, they remain a persistent threat to the crypto industry. Recently, the United Nations flagged North Korea’s involvement in numerous cyberattacks on cryptocurrency platforms.

儘管當局確實努力從這些臭名昭著的駭客手中追回被盜資金，但他們仍然對加密產業構成持續威脅。最近，聯合國指出北韓參與了針對加密貨幣平台的多起網路攻擊。

According to a UN panel report from May, the regime is suspected of orchestrating roughly 97 crypto hacks between 2017 and 2024, collectively valued at $3.6 billion.

根據 5 月聯合國小組的報告，該政權涉嫌在 2017 年至 2024 年間策劃了大約 97 起加密貨幣駭客攻擊，總價值達 36 億美元。

These activities are believed to play a major role in funding North Korea’s missile and nuclear programs, highlighting the broader geopolitical implications of these crimes.

據信，這些活動在為北韓的飛彈和核子計畫提供資金方面發揮了重要作用，凸顯了這些罪行的更廣泛的地緣政治影響。

Despite the coordinated efforts of authorities and platforms to curb the attacks from these hackers, they have been quite resilient. Just last month, this same hacking group stole roughly $3 billion worth of cryptocurrency from users by “devising a fake blockchain game.”

儘管當局和平台協調努力遏制這些駭客的攻擊，但它們仍然相當有彈性。就在上個月，這個駭客組織透過「設計虛假的區塊鏈遊戲」從用戶那裡竊取了價值約 30 億美元的加密貨幣。

According to reports, the operation that led to this large sum of theft was conducted by the North Korean hackers within six years, from 2016 to 2022.

據報道，導致這筆巨額盜竊的行動是北韓駭客在2016年至2022年的六年內進行的。