WazirX 黑客攻击：与朝鲜有关的 Lazarus 集团利用交易所窃取 2.3 亿美元的加密货币

总部位于印度的加密货币交易巨头 WazirX 的一个多重签名钱包遭遇安全漏洞，区块链安全公司和专家称该漏洞似乎是由与朝鲜有关的黑客所为，该公司已被利用超过 2.3 亿美元。

Cryptocurrency exchange WazirX has been exploited for over $230 million after one of its multisig wallets suffered a security breach that blockchain security firms and experts said appears to have been carried out by North Korea-linked hackers.

加密货币交易所 WazirX 的一个多重签名钱包遭遇安全漏洞，区块链安全公司和专家称该漏洞似乎是由与朝鲜有关的黑客所为，该交易所已被利用超过 2.3 亿美元。

Multiple blockchain security and analysis firms flagged the exploit that affected user funds Thursday, revealing that most of the cryptocurrencies stolen were in popular memecoin Shiba Inu ($SHIB).

周四，多家区块链安全和分析公司指出了影响用户资金的漏洞，并透露大部分被盗的加密货币都是流行的 memecoin Shiba Inu ($SHIB)。

WazirX confirmed the attack, publishing preliminary findings of an investigation "to clarify the situation."

WazirX 证实了此次攻击，并发布了初步调查结果“以澄清情况”。

At WazirX, our commitment to transparency and community welfare is paramount. There was a cyber attack on one of our multisig wallets. Below are the preliminary findings to clarify the situation:» Incident Overview: A cyber attack occurred in one of our multisig wallets…

在 WazirX，我们对透明度和社区福利的承诺至关重要。我们的一个多重签名钱包遭到了网络攻击。以下是澄清情况的初步调查结果：» 事件概述：我们的一个多重签名钱包发生了网络攻击……

The exchange, which describes itself as the largest crypto exchange in India, said it has robust security features and the cyberattack was "a force majeure event beyond our control." It said it will continue to locate and recover the pilfered funds and has reached out to "the best resources to help us in this endeavor."

该交易所自称是印度最大的加密货币交易所，并表示其具有强大的安全功能，网络攻击是“我们无法控制的不可抗力事件”。该公司表示将继续寻找并追回被盗资金，并已寻求“最好的资源来帮助我们实现这一目标”。

Leading blockchain analytics firm Arkham Intelligence revealed late Thursday that the $102.1 million in stolen $SHIB "has now been fully sold off by the attacker."

领先的区块链分析公司 Arkham Intelligence 周四晚间透露，被盗的 1.021 亿美元的 $SHIB“现已被攻击者全部出售”。

UPDATE: The WazirX Hacker is out of SHIB.$102.1M SHIB was stolen this morning from WazirX and has now been fully sold off by the attacker. pic.twitter.com/sjCSZJhdIv

更新：WazirX 黑客已退出 SHIB。今天早上，价值 1.021 亿美元的 SHIB 从 WazirX 被盗，现已被攻击者全部出售。 pic.twitter.com/sjCSZJhdIv

Following news of the dump, the token, which is the Top 2 memecoin on CoinGecko's ranked meme tokens, slumped by over 8%.

在抛售消息传出后，该代币（CoinGecko 排名第二的模因代币）暴跌超过 8%。

Prominent crypto sleuth ZachXBT, who identified the KYC (know your customer) deposit address used by the exploiter to receive the stolen funds, revealed that upon tracing the hacker's movements, he determined that "the WazirX hack has the potential markings of a Lazarus Group attack (yet again)."

著名加密货币侦探 ZachXBT 识别了利用者用于接收被盗资金的 KYC（了解你的客户）存款地址，他透露，在追踪黑客的行动后，他确定“WazirX 黑客攻击具有 Lazarus Group 攻击的潜在特征” （再次）。”

6/ This is where my tracing ends as the BTC appears to come from an unknown service making it difficult to trace. All I can say is the WazirX hack has the potential markings of a Lazarus Group attack (yet again) Hopefully the WazirX team will be transparent with their… https://t.co/IjzlI76TRQ

6/ 我的追踪到此结束，因为 BTC 似乎来自未知服务，因此很难追踪。我只能说，WazirX 黑客攻击有潜在的拉撒路集团攻击的痕迹（再次）希望 WazirX 团队能够对其保持透明...... https://t.co/IjzlI76TRQ

Blockchain intelligence firm Elliptic said the exploit was a "North Korea-linked breach." It added that more than 200 different digital assets were stolen, including some $52.6 million worth of Ether ($ETH), the native cryptocurrency of the Ethereum blockchain, and around $7.6 million of the $PEPE memecoin.

区块链情报公司 Elliptic 表示，此次漏洞是“与朝鲜有关的违规行为”。它补充说，超过 200 种不同的数字资产被盗，包括价值约 5260 万美元的以太坊 ($ETH)（以太坊区块链的原生加密货币）和约 760 万美元的 $PEPE memecoin。

Elliptic confirmed Arkham's earlier revelation that some of the pilfered assets were already sold off. Some were swapped for $ETH "using a variety of decentralized services, an expected initial step of a typical laundering process."

Elliptic 证实了 Arkham 早些时候透露的一些被盗资产已经被出售的消息。 “使用各种去中心化服务，这是典型洗钱过程的预期第一步”，其中一些被兑换成 ETH。

Lazarus Group is a notorious North Korean state-sponsored hacking group that has been linked to multiple exploits in the cryptocurrency space. Within a three-year period, the exploiters are said to have laundered some $200 million in pilfered crypto.

Lazarus Group 是一个臭名昭著的朝鲜国家支持的黑客组织，与加密货币领域的多个漏洞有关。据称，在三年内，利用被盗加密货币的犯罪分子洗钱金额约为 2 亿美元。

ZachXBT published a lengthy report in April, unveiling the tactics used by Lazarus Group to cover its tracks as it laundered the funds it stole across over 25 hacks carried out between August 2020 and October 2023.

ZachXBT 在 4 月份发布了一份长篇报告，揭露了 Lazarus Group 在洗钱 2020 年 8 月至 2023 年 10 月期间实施的超过 25 次黑客攻击中窃取的资金时所使用的策略。

Pankaj Tanwar, the founder of the crypto education platform BTC Expert India, said he hopes that WazirX can recover the funds. "This mistake will damage crypto in India beyond imagination," he said.

加密货币教育平台 BTC Expert India 创始人 Pankaj Tanwar 表示，希望 WazirX 能够收回资金。 “这个错误将对印度加密货币造成超乎想象的损害，”他说。

Still not able to understand, 6 people there, need 4 to verify still hacked and blame game. Hope you guys will be able to recover funds as millions of users household on stake - This mistake will damage #Crypto in India beyond imagination.

仍然无法理解，那里有 6 个人，需要 4 个人来验证是否仍然被黑并责怪游戏。希望你们能够在数百万用户家庭受到威胁时收回资金 - 这个错误将对印度的 #Crypto 造成超乎想象的损害。

One user questioned why the exchange "keep[s] your 50% fund in a single wallet." WazirX is known to have held some $500 million worth of assets before the exploit, as per prominent Indian crypto figure Aditya Singh. "It's over for you guys. It's Lazarus Group. They have already sold and converted to cash," the user said.

一位用户质疑为什么交易所“将 50% 的资金放在一个钱包中”。据印度著名加密货币人物 Aditya Singh 称，WazirX 在被利用之前持有价值约 5 亿美元的资产。 “你们已经结束了。这是拉撒路集团。他们已经出售并兑换成现金了，”该用户说道。

As per the Latest POR report, Wazirx was Hodling $503 Million worth of Crypto. Hack is worth $230 Million as of now. If this amount is not recovered, can become a big problem for the exchange. pic.twitter.com/OAGa0KQJRB

根据最新的 POR 报告，Wazirx 持有价值 5.03 亿美元的加密货币。截至目前，Hack 的价值为 2.3 亿美元。如果这笔金额不收回，可能会成为交易所的大问题。 pic.twitter.com/OAGa0KQJRB

It is unclear whether WazirX is working with law enforcement to help recover the funds.

目前尚不清楚 WazirX 是否正在与执法部门合作以帮助追回资金。