Poloniex 黑客打破六个月的沉默，秘密转移被盗资产

11 月 Poloniex 黑客事件的肇事者重新浮出水面，通过臭名昭著的混合器 Tornado Cash 转移部分被盗资金，以实现交易匿名化。这位潜伏的黑客最近的活动类似于朝鲜黑客组织 Lazarus 的策略，该组织在过去三年中策划了类似的大规模加密货币黑客攻击，并洗钱超过 2 亿美元。

Poloniex Hacker Resurfaces, Moving Stolen Assets in Stealthy Maneuver

Poloniex 黑客重新露面，秘密转移被盗资产

Six Months of Silence Broken: Poloniex Hacker Stirs

六个月的沉默被打破：Poloniex 黑客骚乱

The cyberattacker responsible for the infamous Poloniex hack of November 2023 has re-emerged, making clandestine movements of the stolen assets. This dormant period, spanning over half a year, has ended with a flurry of activity.

对 2023 年 11 月臭名昭著的 Poloniex 黑客事件负责的网络攻击者再次出现，秘密转移了被盗资产。这段长达半年多的蛰伏期，终于在一阵忙碌中结束了。

According to Arkham Intelligence, a wallet linked to the Poloniex hacker sprang back into action on Tuesday, May 7. Two significant transactions were detected: one involving the transfer of 1126 Ethereum (ETH), valued at approximately $3.5 million, and another, larger transaction of 501 Bitcoin (BTC), worth roughly $32 million, which occurred on April 30.

据 Arkham Intelligence 报道，与 Poloniex 黑客相关的钱包于 5 月 7 日星期二重新活跃起来。检测到两笔重大交易：一笔涉及转移 1126 个以太坊 (ETH)，价值约 350 万美元，另一笔金额更大。 501 个比特币 (BTC)，价值约 3200 万美元，发生于 4 月 30 日。

Tornado Cash: The Tool of Choice for Anonymity

Tornado Cash：匿名的首选工具

In a departure from previous tactics, the recent ETH transfer took a more covert route. Instead of being directly sent to another wallet, the hacker employed the notorious mixer Tornado Cash. This tool, known for its ability to obscure cryptocurrency transactions, was utilized to launder the stolen funds by dispersing them across multiple wallets, effectively obfuscating their trail.

与之前的策略不同，最近的 ETH 转账采取了更加隐蔽的路线。黑客没有直接发送到另一个钱包，而是使用了臭名昭著的混合器 Tornado Cash。该工具以其掩盖加密货币交易的能力而闻名，被用来通过将被盗资金分散在多个钱包中来洗钱，从而有效地混淆了他们的踪迹。

Lazarus: A Suspect with Striking Resemblances

拉撒路：长相惊人的嫌疑人

While the true identity of the Poloniex hacker remains elusive, the modus operandi bears striking similarities to the North Korean-backed hacker group Lazarus. The magnitude of the Poloniex loot echoes previous large-scale thefts orchestrated by Lazarus, including the Harmony Protocol hack ($100 million), the Stake.com heist ($41 million), and the Atomic Wallet cyber attack ($25 million).

虽然 Poloniex 黑客的真实身份仍然难以捉摸，但其作案手法与朝鲜支持的黑客组织 Lazarus 有着惊人的相似之处。 Poloniex 抢劫案的规模与 Lazarus 之前策划的大规模盗窃案相呼应，包括 Harmony Protocol 黑客攻击（1 亿美元）、Stake.com 抢劫（4100 万美元）和 Atomic Wallet 网络攻击（2500 万美元）。

Furthermore, the use of Tornado Cash in the Poloniex hack mirrors Lazarus's documented tactics. The mixer has been a preferred tool for the group, enabling them to conceal transaction paths and evade detection. Over the past three years, Lazarus has successfully executed over 25 hacks, amassing over $200 million in illicit gains.

此外，在 Poloniex 黑客攻击中使用 Tornado Cash 也反映了 Lazarus 记录的策略。混合器一直是该组织的首选工具，使他们能够隐藏交易路径并逃避检测。在过去三年中，Lazarus 已成功执行了超过 25 次黑客攻击，积累了超过 2 亿美元的非法收益。

Poloniex Hack: A Major Loss for the Industry

Poloniex 黑客攻击：行业的重大损失

The Poloniex hack of 2023 stands as a significant setback for the cryptocurrency industry. The stolen assets, totaling $170 million in value, comprised 25,563 ETH, 305,042 TRX, 626 BTC, and 364,292 BTCT. The hacker's recent movements have sparked concerns about potential laundering of the remaining stolen funds.

2023 年的 Poloniex 黑客事件对加密货币行业来说是一次重大挫折。被盗资产价值总计 1.7 亿美元，包括 25,563 ETH、305,042 TRX、626 BTC 和 364,292 BTCT。黑客最近的行动引发了人们对剩余被盗资金可能被洗钱的担忧。

Legal Action and Regulatory Challenges

法律诉讼和监管挑战

In August 2023, the US Justice Department imposed sanctions on Tornado Cash for its facilitation of money laundering by illicit actors. The anonymity of crypto hacks and the presence of numerous malicious players pose significant challenges in attributing the Poloniex hack to Lazarus or any other group.

2023 年 8 月，美国司法部因 Tornado Cash 为非法行为者洗钱提供便利而对其实施制裁。加密货币黑客攻击的匿名性以及大量恶意玩家的存在，给将 Poloniex 黑客攻击归咎于 Lazarus 或任何其他组织带来了重大挑战。

Implications and Future Outlook

影响和未来展望

The Poloniex hack continues to cast a shadow over the cryptocurrency industry. The recent resurgence of the attacker serves as a sobering reminder of the ongoing threats posed by cybercriminals. While regulatory bodies and law enforcement agencies intensify their efforts to combat these threats, the need for increased vigilance and robust security measures remains paramount.

Poloniex 黑客事件继续给加密货币行业蒙上阴影。攻击者最近的死灰复燃提醒人们，网络犯罪分子正在构成持续的威胁。尽管监管机构和执法机构加大力度应对这些威胁，但提高警惕和采取强有力的安全措施仍然至关重要。