63亿美元被盗：币安遭遇史上最大加密货币盗窃，约30亿已被冻结，公司称全额赔付
全球最大的加密货币交易所币安（Binance）10月29日晚公布初步调查结果：该公司当天遭遇的安全事件估计总影响约为63亿美元，是加密货币行业有记录以来规模最大的一起盗窃。币安称，约30亿美元受影响资产已被合作伙伴冻结在链上，公司将动用用户安全资产基金（SAFU）与公司资金承担全部黑客损失，用户资金安全。
事件发生在10月29日下午（美东时间）。链上追踪机构发现，币安多个热钱包在短时间内出现大额异常转出，资金流向比特币、以太坊、Tron、Ripple 等多条区块链。币安先在社交平台 X 上表示，团队正在紧急核查一个「潜在安全问题」；币安创始人赵长鹏（Changpeng Zhao）随后发文称，这起事件「看起来像是一次黑客攻击」。币安随后暂停全部充值与提现，并撤销了受影响地址的授权。
冻结行动随即展开。稳定币发行商 Tether 冻结了逾15.7亿美元的 USDT，Circle 冻结了逾8亿美元的 USDC，两家合计冻结逾23.8亿美元；币安联合创始人何一（Yi He）称，Ripple 还冻结了约2亿美元。币安称，迄今冻结的受影响资产总额约为30亿美元，其余约33亿美元的去向尚未公布最新进展。区块链分析公司 Chainalysis 称，截至美东时间29日晚8时30分，已确认被盗金额至少为59.12亿美元。
关于入侵路径，币安的初步调查显示，事件可能涉及一名 DevOps 工程师的笔记本电脑被入侵，攻击者借此进入一个服务容器，并提交了未经授权的提现交易。币安同时表示，目前没有发现任何钱包私钥泄露的证据，调查仍在进行，公司将在查清事实后发布详细技术报告。何一表示，完成安全扫描后将恢复提现。
何一当晚发文称：「用户资金安全。币安将承担全部黑客损失。」赵长鹏已不再负责币安的日常管理，他发文表示，作为股东，他预期全部用户资金都将获得全额覆盖。在美国独立运营的 Binance.US 表示，该平台未受这起安全事件影响。
市场随即作出反应。据路透社报道，比特币一度跌至六周低点，尾段下跌3%，报76,469.82美元；以太币下跌逾3%，报2,185.83美元；加密货币交易所 Coinbase 的股价在盘后交易中下跌4.8%，比特币持仓公司 Strategy 下跌近6%。多位分析人士对路透社表示，这起事件可能动摇投资者对中心化交易所资产托管安全的信心，后续影响取决于被盗资产的冻结与追回进展，以及币安恢复充提的时间。
此前加密货币行业规模最大的盗窃发生在2025年2月，交易所 Bybit 放在离线冷钱包中的约15亿美元以太币被盗；本次币安事件的估计规模约为其四倍。多家区块链安全机构研判，攻击手法与朝鲜相关黑客组织的既往行动相似，其中区块链情报公司 TRM Labs 称其已把攻击追溯至朝鲜黑客组织「TraderTraitor」；币安尚未确认攻击者身份，仅表示正与执法机构合作追查。截至币安最新一次更新，充值与提现仍处于暂停状态，恢复时间尚未公布。
关联：三千余万元彩礼成官司：孙宇晨起诉景甜及其父母，案件已立案
关联：63亿美元被盗之夜：读懂加密货币与币安，全球最大交易所为何从未上市
$6.3 Billion Stolen: Binance Suffers Largest Crypto Theft in History, About $3 Billion Frozen, Exchange Pledges Full Reimbursement
Binance, the world's largest cryptocurrency exchange, released preliminary findings on the evening of October 29: the security incident that hit the company that day had an estimated total impact of about $6.3 billion, the largest theft in the cryptocurrency industry's history. Binance said about $3 billion of the affected assets had been frozen on-chain with the help of partners, and that the company would cover all hacking losses from its Secure Asset Fund for Users (SAFU) and company funds, adding that user funds are safe.
The incident unfolded on the afternoon of October 29, Eastern Time. On-chain trackers detected large, abnormal transfers out of several Binance hot wallets within a short period, with funds moving across Bitcoin, Ethereum, Tron, Ripple and several Layer 2 networks. Binance first said on X that its teams were urgently reviewing a "potential security issue"; founder Changpeng Zhao then wrote that the incident "looked like a hack." Binance suspended all deposits and withdrawals and revoked the affected address authorization.
Freezes followed quickly. Stablecoin issuer Tether froze more than $1.57 billion in USDT and Circle froze more than $800 million in USDC, together more than $2.38 billion; Binance co-founder Yi He said Ripple had also frozen about $200 million. Binance said about $3 billion of affected assets had been frozen so far, and gave no update on the remaining roughly $3.3 billion. Blockchain analytics firm Chainalysis said that as of 8:30 p.m. ET on October 29, at least $5.912 billion had been confirmed stolen.
On how the attacker got in, Binance's initial investigation suggests the incident may involve a compromised DevOps engineer's laptop, which allowed the attacker to gain access to a service container and submit unauthorized withdrawal transactions. Binance said it had found no evidence of any wallet private key leak, that the investigation is ongoing, and that it will publish a detailed technical report once the facts are verified. Yi He said withdrawals will be re-enabled as soon as the security scan is complete.
Yi He wrote that night: "User funds are safe. Binance will cover all hacking losses." Changpeng Zhao no longer manages Binance day to day; he wrote that, as a shareholder, he expects all user funds to be fully covered. Binance.US, which operates independently in the United States, said it was not affected by the security incident.
Markets reacted immediately. According to Reuters, bitcoin fell to a six-week low, last down 3% at $76,469.82, while ether was down more than 3% at $2,185.83; shares of crypto exchange Coinbase slid 4.8% and bitcoin holder Strategy fell nearly 6% in extended U.S. trading. Several analysts told Reuters the incident could shake investor confidence in the custody security of centralized exchanges, and that what happens next depends on how much of the stolen assets can be frozen or recovered and how soon Binance restores deposits and withdrawals.
The previous largest crypto theft occurred in February 2025, when about $1.5 billion in ether was taken from a cold wallet at the exchange Bybit; the estimated scale of the Binance incident is about four times that. Several blockchain security firms assessed that the tactics resembled past operations linked to North Korea, with intelligence firm TRM Labs saying it had traced the attack to the North Korean group "TraderTraitor"; Binance has not identified the attackers and said only that it is working with law enforcement. As of Binance's latest update, deposits and withdrawals remained suspended, with no resumption time announced.
来源：GSM·美国（原文链接）
图片来源：图：笔记本电脑键盘上的一枚实体比特币纪念币。本案中币安初步调查指向一名工程师的笔记本电脑可能被入侵。Satheesh Sankaran 摄，CC BY 2.0，经 Wikimedia Commons。 / A physical bitcoin token on a laptop keyboard. Binance's preliminary investigation points to a possibly compromised engineer's laptop. Photo by Satheesh Sankaran, CC BY 2.0, via Wikimedia Commons.
