Bitget遭黑客攻击损失超3.5亿美元,CEO陈沁回应
Cuomo Seeks Clarity, Bitget Hacked, Peirce's Exit Interview
Bitget 重大安全事件直接影响行业信任与资金流向,需关注后续赔付进展及监管反应。
LIVE FROM BLOOMBERG’S WORLD HEADQUARTERS IN NEW YORK. I’M SCARLET FU. TIM: AND I’M TIM STENOVEC. WELCOME TO "BLOOMBERG CRYPTO." SCARLET: MOMENTS FROM NOW, WE’LL SPEAK TO THE FORMER GOVERNOR OF NEW YORK, ANDREW CUOMO, ABOUT THE FAILURE OF THE CLARITY ACT AND WHAT ROLE HE SEES CRYPTO PLAYING IN POLITICS. TIM: AND ANOTHER MAJOR CRYPTO HACK, THIS TIME ON THE EXCHANGE. WE TALKED WITH THE C.E.O. ABOUT HOW HACKERS WERE ABLE TO STEAL HUNDREDS OF MILLIONS OF DOLLARS IN TOKENS AND HOW HER COMPANY IS RESPONDING.
直播来自彭博社位于纽约的世界总部。我是斯卡莱特·福。蒂姆:我是蒂姆·斯特诺韦克。欢迎收看《彭博加密货币》。斯卡莱特:稍后我们将采访前纽约州州长安德鲁·科莫,探讨《清晰度法案》的失败以及他认为加密货币在政治中扮演的角色。蒂姆:另一起重大加密货币黑客事件发生在这家交易所上。我们采访了首席执行官,了解黑客如何盗取数亿美元的代币,以及她的公司如何应对。
SCARLET: AND THE S.E.C. COMMISSIONER IS ENDING HER TENURE THIS WEEK. WE DISCUSS HOW FAR CRYPTO HAS COME DURING HER TIME. TIM: THAT’S ALL AHEAD ON "BLOOMBERG CRYPTO." FIRST UP, A CHECK ON HOW THINGS STAND RIGHT NOW. BITCOIN IS DOWN ABOUT HALF A PERCENTAGE POINT TODAY. A LITTLE BIT OF A RISK-OFF DAY IN EQUITY MARKETS. SO, TOO, IN DIGITAL ASSETS. STILL HOVERING AROUND $83 3,000 PER BITCOIN. ETHER DOWN. SOLANA DOWN TO $118.
斯卡莱特:美国证券交易委员会(SEC)委员本周即将卸任。我们将讨论在她的任期内加密货币取得了多大进展。蒂姆:以上都是《彭博加密货币》接下来的内容。首先来看当前市场状况。比特币今日下跌约0.5个百分点。股市风险偏好降低,数字资产亦然。比特币价格仍徘徊在每枚83,300美元左右。以太坊下跌。索拉纳跌至118美元。
I WANT TO ZOOM OUT AND LOOK AT THE QUARTER, BECAUSE IT’S BEEN QUITE A QUARTER FOR BITCOIN. THE QUARTER UNDERSTANDS TOMORROW. BITCOIN IS UP CLOSE TO 40% FROM JULY, EXCUSE ME, IT ENDS LATER THIS WEEK, NOT TOMORROW. 40% FROM JULY THROUGH SEPTEMBER SO FAR. IT REVERSES THE 14% LEASE IN THE PREVIOUS QUARTER. IF YOU LOOK AT HOW BITCOIN HAS DONE THUS FAR THIS QUARTER, UP 40%, YOU’VE GOT TO GO ALL THE WAY BACK TO 2024 TO SEE A PERFORMANCE SUCH AS THAT IN A SINGLE QUARTER, AND THAT WAS WHEN BITCOIN WAS UP 48% -- 47%.
我想把视角拉远,看看整个季度,因为比特币的这个季度相当不平凡。季度明天结束。比特币自七月以来涨幅接近40%,抱歉,我说错了,它将在本周晚些时候结束,而不是明天。从七月到九月迄今涨幅已达40%。这扭转了上一季度14%的跌幅。如果你看比特币本季度至今的表现,上涨40%,你必须回到2024年才能看到单季度有这样的表现,当时比特币上涨了48%——确切地说是47%。
SCARLET: AND DEMAND FROM INSTITUTIONS CERTAINLY HELPED TO SUPPORT BITCOIN’S RECENT PRICE ACTION. BITCOIN ETF’S ATTRACTED ABOUT $2.4 BILLION. THAT IS THE LARGEST WEEKLY NET INFLOW SINCE EARLY OCTOBER LAST YEAR. AND YOU REMEMBER WHAT HAPPENED LAST OCTOBER. THE COIN SET A RECORD ABOUT $126,000 BEFORE THEN TUMBLING AND ENTERING A CRYPTO WINTER. SO THIS LATEST SURGE IN WEEKLY INFLUENCE WAS ENOUGH TO PUSH THE ETF’S INTO POSITIVE TERRITORY FOR THE YEAR, TIM.
斯卡莱特:机构的需求无疑有助于支撑比特币近期的价格走势。比特币ETF吸引了约24亿美元的资金流入。这是自去年十月初以来最大的单周净流入。你还记得去年十月发生了什么吗?在那之前,比特币创下约126,000美元的历史高点,随后暴跌并进入加密寒冬。因此,本周最新的资金涌入浪潮足以推动ETF在今年转为正收益,蒂姆。
TIM: LET’S GET TO ONE OF THE BIGGEST STORY THAT’S ROCKING THE CRYPTO INDUSTRY THIS WEEK, THE EXCHANGE BIT REPORTED MORE THAN $350 MILLION IN UNAUTHORIZED TRANSFERS FROM SOME OF ITS WALLETS, LEADING IT TO TEMPORARILY SUSPEND WITHDRAWALS. THE COMPANY WORKED TO ADDRESS THE HACK. THE C.E.O. APPEARED ON A THREE-HOUR LIVE STREAM TO SHARE DETAILS. SHE ALSO POSTED ON X SAYING, "BECAMED ON I.P. BEHAVIORAL PATTERNS AND SIGNATURES, THIS ATTACK IS CONSISTENT WITH TECHNIQUES USED BY DPRK-LINKED HACKER GROUPS."
蒂姆:让我们来看看本周震动加密货币行业的最大新闻之一。交易所Bit报告称其部分钱包发生了超过3.5亿美元的未经授权转账,导致其暂时暂停提币。该公司努力应对此次黑客攻击。首席执行官进行了长达三小时的直播以分享细节。她还在X平台上发帖称:“基于IP行为模式和签名特征,此次攻击与朝鲜关联黑客组织使用的技术一致。”
WE HAVE NOTIFIED RELEVANT AUTHORITIES AND ARE COOPERATING FULLY WITH THEM GLOBALLY. FOR MORE, WE ARE JOINED BY THE C.E.O., GRACY CHEN. GOOD TO HAVE YOU ON THE PROGRAM. I’M REALLY CURIOUS ABOUT WHAT HAPPENED WITH YOUR COMPANY AND HOW YOU’RE RESPONDING RIGHT NOW. HOW ARE YOU MAKING SURE, FIRST, THIS IS NEVER GOING TO HAPPEN AGAIN?
我们已通知相关当局,并正在全球范围内与他们充分合作。接下来我们有幸请到了首席执行官陈嘉盈(Gracy Chen)。很高兴你来到节目。我真的很想知道你的公司发生了什么,以及你们目前是如何应对的。首先,你是如何确保此类事件绝不再发生的?
NICE TO SEE YOU AGAIN, TIM. I’M VERY SAD IS A THIS IS THE OCCASION THAT WE GET TO SPEAK, NOT IN THE MARKET, BUT ON OUR HACK. SO THE BIGGEST LESSON THAT WE KNOW FROM HERE IS THAT THIS HAS BEEN EIGHT YEARS OF OUR OPERATION. THERE ISN’T ANY INCIDENT, AND THIS CAN NEVER BE A REASON TO BECOME JUST COMPLACENT. SECURITY HAS TO EVOLVE AS THE PLATFORM GROWS IN THE ATTACK METHODS INVOLVED. SO FAR, ONE MAJOR LESSON IS MANAGING THE THIRD-PARTY SECURITY RISK.
很高兴再次见到你,蒂姆(Tim)。我很遗憾这是我们对话的场合,不是在市场中,而是在我们的平台遭遇黑客攻击之后。从这里得出的最大教训是,这是我们运营以来的第八年,此前从未发生过任何事故,这绝不能成为我们变得自满的理由。随着平台的发展以及攻击手段的不断演变,安全性也必须随之进化。到目前为止,一个主要的教训是管理第三方安全风险。
THE ATTACKER THIS TIME THAT THEY EXPLOITED A VULNERABILITY IN ONE OF THE THIRD-PARTY SECURITY PRODUCTS TO OBTAIN HIGH-LEVEL INTERNAL CREDENTIALS HAS INTRODUCED A LOT STRICTER ASSESSMENTS BEFORE ANY THIRD-PARTY PRODUCT HAD DEPLOYED AND STRONGER CONTROLS AROUND THE DEPLOYMENT THEMSELVES. AND THE SYSTEM ACCESS HAS BEEN TIGHTENED, RESTRICTING ACCESS AND REQUIRING MULTIPLE APPROVALS FOR CRITICAL OPERATIONS. WE’RE ALSO STRENGTHENING VERIFICATION AND ANY UNLAWFUL MONITORING.
此次攻击者利用了我们某个第三方安全产品中的漏洞,获取了高级别的内部凭证。为此,我们在部署任何第三方产品之前引入了更严格的评估,并对部署本身加强了控制。同时,系统访问权限已被收紧,限制了对关键操作的访问并要求多重审批。我们也在加强验证机制,防止任何非法监控行为。
SO THERE ARE A LOT OF THINGS THAT WE’VE BEEN DOING, BUT THE BROADER LESSON IS THAT SECURITY ISN’T ONLY JUST ABOUT MANAGING OR PROTECTING PRIVATE WALLETS, WHICH IS THE CASE THIS TIME. WE HAVE BEEN PROTECTING THOSE THINGS. BUT EVERY SYSTEM, ALSO THIRD-PARTY PRODUCT THAT CAN BE PROVIDED, THAT CAN PROVIDE ACCESS TO CRITICAL INFRASTRUCTURE HAS TO BE TREATED AS PART OF THE SECURITY PERIMETER. SCARLET: DO YOU HAVE ANY INFORMATION ON HOW LONG THE HACKER WAS INSIDE THE PLATFORM GATHERING KEYS?
所以我们做了很多事情,但更广泛的教训是,安全不仅仅关乎管理或保护私钥钱包,尽管这次的情况确实如此。我们一直在保护这些东西。但是,每一个能够提供的、能够提供对关键基础设施访问权限的系统,包括第三方产品,都必须被视为安全边界的一部分。斯嘉丽(Scarlet):你是否有关于黑客在平台上收集密钥持续了多久的信息?
SO NO, WE DON’T HAVE PRIVATE KEYS BEING EXPOSED. WE DON’T HAVE OUR WALLETS BEING TOUCHED. SO IT’S NOT ABOUT GATHERING THE KEY, IT’S MORE ABOUT GATHERING THE VULNERABILITY OF THE THIRD-PARTY SERVICE THAT WE HAD, SO THE VULNERABILITY IS THE KEY THING, BUT NO, I DON’T HAVE MORE ABOUT THE UPDATE ABOUT HOW LONG DID THEY BE THERE LIKE BEFORE THIS HAPPENED. TIM: CAN YOU UPDATE ON WHAT YOU’RE SEEING ON THE PLATFORM RIGHT NOW?
所以,不,我们没有私钥泄露,也没有我们的钱包被触碰。因此,问题不在于收集密钥,而在于收集我们所拥有的第三方服务的漏洞。漏洞是关键所在,但不,我没有更多关于他们在此事发生前停留了多长时间的更新信息。蒂姆:你能更新一下你现在在平台上看到的情况吗?
OUR NEWS TIMEOUTING RECOVERY NIGHT THE HACK HASSED CUSTOMER OUTFLOWS AT BIT GET. IS THAT NUMBER STILL CONSISTENT?
我们的新闻截止时间显示,黑客攻击导致 Bitget 的客户资金流出。这个数字仍然一致吗?
WHAT IS THE NUMBER YOU ARE SEEING? TIM: $463 MILLION IN THE 24 HOURS INTO TUESDAY.
你看到的数字是多少?蒂姆:截至周二,24小时内为4.63亿美元。
THAT NUMBER SOUNDS ABOUT RIGHT. BECAUSE WE DO HAVE, THIS IS AN ONGOING WITHDRAWAL FROM OUR PLATFORM, AND WE’RE GOING TO OPEN WITHDRAW FROM TOMORROW, BUT THERE SHOULD BE ABOUT 100 WITHDRAW SO FAR IN TERMS OF THE TOTAL VOLUME. TIM: HOW MUCH MORE DOES THAT VOLUME INCREASE? LIKE, WHAT ARE YOU TALKING ABOUT INTERNALLY TO PREPARE FOR?
这个数量听起来差不多。因为我们确实有持续的提币操作,这是从我们的平台进行的持续提币,我们明天将开放提币功能,但目前总交易量方面大约有100笔提币。TIM:这个量还会增加多少?你们内部在为此做哪些准备?
YOU MEAN THE WITHDRAW, RIGHT? TIM: YEAH, WITHDRAWALS.
你是指提币,对吧?TIM:是的,提币。
YEAH, THE WITHDRAW ACTUALLY STABILIZED A LOT TODAY. I THINK YESTERDAY WEAVE ALREADY HIT MORE THAN -- WE’VE ALREADY HIT MORE THAN 7,000, SORRY, SHOULD BE 9,000 WITHDRAWAL ORDERS, AND THAT INCLUDES 4,000, JUST IN THE VERY FIRST HOUR. SUSPECT THOSE HUNDREDS OF MILLIONS, ACTUALLY MOST OF THEM HAPPEN ON THE FIRST HOUR OF THE WITHDRAW RESTART. SO ACTUALLY RIGHT NOW IT STABILIZED ALREADY, AND GOOD NEWS IS THAT EVEN TODAY, WHEN WE OPEN UP THEETH EAR UPWITHDRAWAL, THE INFLOW IS ACTUALLY LARGER THAN OUTFLOW, WHICH ACTUALLY SURPRISED ME A LITTLE BIT.
是的,今天的提币实际上已经稳定了很多。我认为昨天Weave已经超过了——我们已经超过了7,000笔,抱歉,应该是9,000笔提币订单,其中仅在最初的一小时内就有4,000笔。我怀疑那些数亿美元的资金,实际上大部分都发生在提币重启的第一个小时。所以现在实际上已经稳定了,好消息是,即使今天当我们重新开放提币时,流入量实际上大于流出量,这有点出乎我的意料。
SCARLET: YOU SAID YOU HAVE A USER PROTECTION FUND OF $464 MILLION FUND. THAT’S KIND OF SERVES AS INSURANCE. HOW IS THIS FUND BEING UTILIZED, AND IS IT BEING DRAWN DOWN?
SCARLET:你说你有一个4.64亿美元的投资者保护基金。这在某种程度上起到了保险的作用。这个基金是如何使用的,是否正在被动用?
YES, SO WE ARE USING THE MONEY FROM THE PROTECTION FUND. BY THE WAY, WE ESTABLISHED THE PROTECTION FUND IN 2022, EVEN BEFORE THE COLLAPSE. SO RIGHT NOW THE PROTECTION FUND HAS ABOUT 3,000 BITCOINS, THAT’S VALUED AT 260 MILLION-ISH IN TERMS OF VALUE, SO IT’S OBVIOUSLY LOWER THAN IT WAS BEFORE THE IT. WE DID USE SOME BITCOINS FROM THE PROTECTION FUND TO MOVE TO THE WALLET IN ORDER TO DEAL WITH THE WITHDRAWAL THAT WE HAVE FROM THE USES.
是的,所以我们正在使用保护基金中的资金。顺便说一下,我们在2022年就建立了保护基金,甚至在崩盘之前就已经建立了。所以目前保护基金大约有3,000个比特币,按价值计算约为2.6亿美元,显然低于IT事件之前的水平。我们确实从保护基金中取出了一些比特币转移到钱包中,以应对来自用户的提币需求。
BUT WE ALSO HAVE ANOTHER PROMISE. WE WILL BE PUTTING OUR COMPANY’S CAPITAL BACK TO THE PROTECTION FUND AND KEEP IT ABOVE 300 MILL. SCARLET: I’M GLAD YOU MENTIONED YOU SOLD SOME BITCOIN. DO YOU THINK THAT SELLING THE BITCOIN IN THE FUND IMPACTED THE PRICE OF BITCOIN IN THE BROADER MARKET? DID YOU SEE ANY RIPPLE EFFECT?
但我们还有另一个承诺。我们将把公司的资本重新注入保护基金,并使其保持在3亿美元以上。SCARLET:很高兴你提到你卖出了一些比特币。你认为卖出基金中的比特币是否影响了更广泛市场上的比特币价格?你是否看到了任何连锁反应?
NO, SO WE DID A -- WE DIDN’T REALLY SELL BITCOINS. WE MOVED BITCOINS FROM THAT WALLET TO OUR HOT WALLET. AND BY THE WAY, YOU MAY KNOW THAT BITGET HAS A SPACE WITHDRAW OPENING, SO ON THE FIRST DAY, IT’S ACTUALLY BITCOIN THAT WE ALLOW USERS TO WITHDRAW. I SUSPECT THAT THEY MAY NOT REALLY SELL THEM. SO IN TOTAL, WE’RE NOT HAVING A LOT OF SELL PRESSURE TO THE MARKET. WE JUST SELL IT, AND I DON’T KNOW IF THEY WITHDRAW THEIR BITCOINS AFTERWARDS.
没有,所以我们并没有真正卖出比特币。我们只是将比特币从那个钱包转移到了我们的热钱包。顺便说一下,你可能知道Bitget开放了ETH提币,所以在第一天,我们允许用户提取的实际上是比特币。我怀疑他们可能真的不会卖出。因此,总体而言,我们没有对市场造成很大的抛压。我们只是卖出了(注:此处原文逻辑稍显混乱,结合上下文意为“我们并未大量抛售”),我不知道他们之后是否会提取他们的比特币。
TIM: THANK YOU. GRACY CHEN, APPRECIATE YOU SHARING YOUR STORY TODAY AND THE RESPONSE THAT BITGET HAS HAD OVER THE LAST COUPLE OF DAYS. WE APPRECIATE YOUR TIME. I WANT TO NOTE, EVERYBODY SHOULD CHECK OUT THE STORY ON BLOOMBERG TERMINAL WRITTEN BY OUR TEAM ABOUT HOW THIS SPURRED A $463 MILLION CUSTOMER OUTFLOWS. THERE’S MORE INFORMATION IN THERE AS WELL. COMING UP IN JUST A MINUTE, FORMER NEW YORK GOVERNOR ANDREW CUOMO DISCUSSES THE CLARITY ACT FALLOUT AND HOW AMERICA NEEDS TO STAY AHEAD IN DIGITAL FINANCE.
TIM:谢谢。格雷西·陈,感谢你今天分享你的故事以及Bitget在过去几天里收到的回应。感谢你的时间。我想指出,每个人都应该查看彭博终端上由我们团队撰写的关于此事如何引发4.63亿美元客户资金流出的报道。里面还有更多信息。稍后,前纽约州州长安德鲁·科莫将讨论《清晰度法案》的余波以及美国如何在数字金融领域保持领先。
AND ALSO, HIS POLITICAL OUTLOOK. SCARLET: TO ACCESS ALL THE LATEST DATA AND NEWS ON CRYPTO, INCLUDING THAT CONVERSATION, MAKE SURE YOU CHECK OUT ALL OUR COVERAGE ON THE TERMINAL AND DO CHECK OUT CRYP GO ON THE TERMINAL. THIS IS BLOOMBERG. SCARLET: WELCOME BACK TO BLOOMBERG TELEVISION. JOINING US NOW FROM WASHINGTON, D.C. IS THE FORMER GOVERNOR OF NEW JOINT VENTURE, ANDREW CUOMO.
此外,还有他的政治观点。斯卡莱特:要获取有关加密货币的最新数据和新闻,包括那段对话,请务必查看我们在终端上的所有报道,并查看终端上的CRYP GO。这是彭博社。斯卡莱特:欢迎回到彭博电视。现在与我们连线的是来自华盛顿特区的前纽约州州长安德鲁·科莫。
更进一步:量化金融体系
看懂新闻只是起点——沿量化金融路径,把它变成能交付的工程能力