韩国当局认定朝鲜黑客是 2019 年以太坊重大抢劫案的肇事者

被盗的加密货币当时价值 580 亿韩元（约合 5570 万美元），经追踪，是朝鲜军事情报机构侦察总局所为。

South Korean authorities have officially identified North Korean hackers as the perpetrators of a major Ethereum heist in 2019, marking a significant breakthrough in the investigation.

韩国当局正式认定朝鲜黑客是 2019 年以太坊重大盗窃案的肇事者，这标志着调查取得重大突破。

The stolen cryptocurrency, valued at 58 billion won (approximately $55.7 million) at the time, was traced to North Korea’s Reconnaissance General Bureau, a military intelligence agency. The hackers reportedly infiltrated a South Korea-based exchange to execute the theft.

被盗的加密货币当时价值 580 亿韩元（约合 5570 万美元），经追踪，是朝鲜军事情报机构侦察总局所为。据报道，黑客渗透到韩国的一家交易所实施盗窃。

Detailing the Hack and the Coordinated Efforts Behind Uncovering the Perpetrators

详细介绍黑客攻击以及揭露肇事者背后的协调努力

The National Police Agency revealed that the attackers stole 342,000 Ethereum tokens, now valued at over 1.4 trillion won (approximately $1.05 billion), making this one of the most notable crypto thefts on record.

国家警察局透露，攻击者窃取了 342,000 个以太坊代币，目前价值超过 1.4 万亿韩元（约合 10.5 亿美元），使这成为有记录以来最引人注目的加密货币盗窃案之一。

While the specific exchange targeted was not disclosed, Upbit, a leading South Korean exchange, had reported a similar loss in Ethereum to an unidentified wallet in 2019.

虽然具体的目标交易所没有披露，但韩国领先的交易所 Upbit 在 2019 年向一个身份不明的钱包报告了类似的以太坊损失。

The hackers laundered over half of the stolen funds through three self-operated crypto exchanges, offering discounts to convert the assets into Bitcoin. The remaining Ethereum was dispersed across 51 other exchanges globally.

黑客通过三个自营加密货币交易所洗掉了一半以上的被盗资金，并提供折扣将资产转换为比特币。剩余的以太坊分散在全球 51 个其他交易所。

According to the report, the investigation involved cooperation between South Korean authorities and the US Federal Bureau of Investigation (FBI), which used advanced techniques to track Internet Protocol (IP) addresses and the movement of stolen assets.

报道称，此次调查涉及韩国当局与美国联邦调查局（FBI）的合作，美国联邦调查局使用先进技术追踪互联网协议（IP）地址和被盗资产的动向。

This marks the first time South Korea has definitively linked a crypto exchange cyberattack to North Korea. Local media outlets attributed the operation to the notorious Lazarus and Andariel hacker groups, both tied to North Korea’s Reconnaissance General Bureau.

这标志着韩国首次明确将加密货币交易所网络攻击与朝鲜联系起来。当地媒体将这次行动归咎于臭名昭著的 Lazarus 和 Andariel 黑客组织，这两个组织都与朝鲜侦察总局有关。

Hackers Pose Persistent Threat To The Crypto Industry

黑客对加密行业构成持续威胁

Notably, this is not the first time North Korean hackers have been linked to the perpetrators behind significant hacking incidents. Over the past years, this group has gained notoriety for targeting cryptocurrency exchanges and financial platforms to fund their country’s operations.

值得注意的是，这并不是朝鲜黑客第一次与重大黑客事件的肇事者联系起来。在过去的几年里，该组织因瞄准加密货币交易所和金融平台为其国家运营提供资金而声名狼藉。

While authorities do make efforts to recover stolen funds from these notorious hackers, they remain a persistent threat to the crypto industry. Recently, the United Nations flagged North Korea’s involvement in numerous cyberattacks on cryptocurrency platforms.

尽管当局确实努力从这些臭名昭著的黑客手中追回被盗资金，但他们仍然对加密行业构成持续威胁。最近，联合国指出朝鲜参与了针对加密货币平台的多起网络攻击。

According to a UN panel report from May, the regime is suspected of orchestrating roughly 97 crypto hacks between 2017 and 2024, collectively valued at $3.6 billion.

根据 5 月份联合国小组的报告，该政权涉嫌在 2017 年至 2024 年间策划了大约 97 起加密货币黑客攻击，总价值达 36 亿美元。

These activities are believed to play a major role in funding North Korea’s missile and nuclear programs, highlighting the broader geopolitical implications of these crimes.

据信，这些活动在为朝鲜的导弹和核计划提供资金方面发挥了重要作用，凸显了这些罪行的更广泛的地缘政治影响。

Despite the coordinated efforts of authorities and platforms to curb the attacks from these hackers, they have been quite resilient. Just last month, this same hacking group stole roughly $3 billion worth of cryptocurrency from users by “devising a fake blockchain game.”

尽管当局和平台协调努力遏制这些黑客的攻击，但它们仍然相当有弹性。就在上个月，这个黑客组织通过“设计虚假的区块链游戏”从用户那里窃取了价值约 30 亿美元的加密货币。

According to reports, the operation that led to this large sum of theft was conducted by the North Korean hackers within six years, from 2016 to 2022.

据报道，导致这笔巨额盗窃的行动是朝鲜黑客在2016年至2022年的六年内进行的。