Bitfinex 涉嫌大規模資料外洩引發危險訊號

在加密貨幣市場的上漲趨勢中，有關熱門交易所 Bitfinex 的資料外洩的消息不斷出現。根據鏈上偵探 Shinoji Research 指控，40 萬客戶的 2.5 TB 資料和資訊被盜。 Bitfinex 尚未確認此外洩事件，但 Tether 執行長兼 Bitfinex 技術長 Paolo Ardoino 駁斥了其真實性，指出洩漏資料不一致，並且與涉嫌攻擊者沒有聯繫。

Alleged Data Breach at Bitfinex Raises Concerns

Bitfinex 涉嫌資料外洩引發擔憂

Amidst the recent resurgence of the cryptocurrency market, news of a potential data breach at Bitfinex has surfaced. According to allegations, the exchange may have suffered a data leak involving approximately 2.5 terabytes of data and the personal information of 400,000 customers.

最近，隨著加密貨幣市場的復甦，有關 Bitfinex 潛在資料外洩的消息浮出水面。據指控，該交易所可能遭受資料洩露，涉及約 2.5 TB 資料和 40 萬客戶的個人資訊。

On-Chain Detective Raises Allegations

鏈上偵探提出指控

The allegations stem from Shinoji Research, an on-chain detective, which claims that the cryptocurrency exchange Bitfinex experienced a data breach potentially affecting 400,000 users. The stolen data allegedly includes 2.5 terabytes of information. Bitfinex has yet to confirm this information.

這些指控來自鏈上偵探 Shinoji Research，該公司聲稱加密貨幣交易所 Bitfinex 經歷了資料洩露，可能影響 40 萬用戶。據稱，被盜資料包括 2.5 TB 的資訊。 Bitfinex 尚未確認此資訊。

Shinoji Research further asserts that the FSociety ransomware group is responsible for the attack. The detective provided links to a page containing usernames and plaintext passwords, suggesting that the hackers may have gained access to sensitive user information.

Shinoji Research 進一步斷言，FSociety 勒索軟體組織對此攻擊負責。偵探提供了包含用戶名和明文密碼的頁面鏈接，表明駭客可能已經獲得了敏感用戶資訊的訪問權限。

Leaked KYC Documents Threaten to Expose User Identities

洩漏的 KYC 文件可能會暴露用戶身份

The alleged size of the stolen data indicates that the hackers could potentially possess all KYC (Know Your Customer) documents submitted by Bitfinex users since the exchange's inception. The hackers have reportedly threatened to release these KYC documents if their demands are not met.

據稱被盜資料的規模表明，駭客可能擁有 Bitfinex 用戶自交易所成立以來提交的所有 KYC（了解您的客戶）文件。據報道，駭客威脅稱，如果不滿足他們的要求，他們將公佈這些 KYC 文件。

In a test conducted by a Shinoji Research follower, one of the leaked passwords was verified, confirming the potential validity of the breach.

在 Shinoji Research 的一名追隨者進行的測試中，其中一個洩漏的密碼得到了驗證，確認了這次洩漏的潛在有效性。

Tether CEO Disputes Data Breach Claim

Tether 執行長對資料外洩索賠提出異議

In response to the allegations, Paolo Ardoino, the CEO of Tether and CTO of Bitfinex, issued a statement on the X platform, arguing that the Bitfinex data leak was likely a fabricated event. Ardoino presented several justifications for his assertion:

針對這些指控，Tether 執行長兼 Bitfinex 技術長 Paolo Ardoino 在 X 平台上發表聲明，認為 Bitfinex 資料外洩很可能是捏造事件。阿多伊諾為他的主張提出了幾個理由：

• The sample data released by the alleged hackers contains 22,500 email and password records, while Bitfinex does not store plaintext passwords or 2FA passwords in plaintext.
• Only 5,000 of the 22,500 emails match active Bitfinex users.
• The suspected hackers have not contacted Bitfinex with any demands, which is unusual behavior for individuals possessing genuine sensitive information.

Bitfinex CTO Assures Funds Safety

涉嫌駭客發布的樣本資料包含22,500封電子郵件和密碼記錄，而Bitfinex不以明文形式儲存明文密碼或2FA密碼。任何要求，對於擁有真正敏感資訊的個人來說，這是不尋常的行為。

In a separate statement, the CTO of Bitfinex addressed the allegations and characterized them as "pure FUD" (fear, uncertainty, and doubt). The CTO emphasized that funds held on the platform remain safe and that the exchange is conducting a thorough investigation to ascertain the veracity of the claims.

Bitfinex 技術長在另一份聲明中回應了這些指控，並將其描述為「純粹的 FUD」（恐懼、不確定性和懷疑）。技術長強調，平台上持有的資金仍然安全，交易所正在進行徹底調查，以確定指控的真實性。

The CTO highlighted that:

首席技術長強調：

• Various security researchers have overstated the severity of the alleged breach.
• The hackers likely compiled a database of email and password combinations from other breaches, as users often reuse credentials across multiple platforms.
• A comprehensive analysis of Bitfinex systems has revealed no evidence of a breach.

Ongoing Investigation and Call for Vigilance

各種安全研究人員都誇大了所指控的違規行為的嚴重性。全面分析沒有發現任何違規行為的證據。

The allegations of a data breach at Bitfinex have sparked investigations by security researchers and the exchange itself. While the exchange has expressed skepticism about the validity of the claims, it has stated that it is monitoring the situation closely.

關於 Bitfinex 資料外洩的指控引發了安全研究人員和交易所本身的調查。儘管該交易所對這些說法的有效性表示懷疑，但表示正在密切關注事態發展。

Users of Bitfinex are advised to remain vigilant and monitor their accounts for any unauthorized activity. It is essential to practice good security measures, such as using strong and unique passwords, enabling two-factor authentication, and being aware of phishing attempts.

建議 Bitfinex 使用者保持警惕並監控其帳戶是否有任何未經授權的活動。採取良好的安全措施至關重要，例如使用強而獨特的密碼、啟用雙重認證以及警惕網路釣魚嘗試。

The outcome of the investigation and the potential impact on Bitfinex users remain uncertain. As more information becomes available, it will be reported accordingly.

調查結果以及對 Bitfinex 用戶的潛在影響仍不確定。隨著更多資訊的出現，我們將進行相應的報告。