Coinbase洩漏使KYC成為眾人矚目的焦點

Coinbase週四分享並在K-8文件中記錄的洩漏揭示了海外支持人員如何被壞演員腐敗，以竊取信息，包括家庭住址，政府ID和銀行帳戶詳細信息。

Several crypto executives took to X to call for know-your-customer (KYC) protocols to be scrapped following reports that leading U.S. exchange Coinbase (NASDAQ:COIN) had disclosed its staff were accepting bribes and leaking users’ personal data.

在報導的報告中，有幾位加密高管呼籲X呼籲知識客戶（KYC）協議，該協議是在報導的報告中，領導美國交易所Coinbase（NASDAQ：COIN）披露了其員工正在接受賄賂並洩露用戶的個人數據。

This new data leak, which was shared by Coinbase on Thursday and documented in a K-8 filing, saw how overseas-based support staff were corrupted by bad actors into stealing information—including home addresses, government I.D. and bank account details—which was then leaked to individuals planning to use it for social engineering scams designed to steal user funds.

Coinbase週四共享了這一新數據洩漏，並在K-8文件中記錄了這一新數據洩漏，該數據洩漏看到了基於不良演員的海外支持人員如何破壞竊取信息（包括家庭地址，政府ID和銀行帳戶詳細信息），然後將其洩漏給計劃將其用於竊取用戶資金的社會工程騙局的個人洩漏。

This may yet cost Coinbase between $180 million and $400 million in reimbursements, while the exchange is also having to deal with the fallout from the Securities and Exchange Commission reportedly launching an investigation into whether the firm exaggerated its user numbers.

這可能會花費在1.8億至4億美元的報銷中，而交易所還必須處理證券和交易委員會的後果，據報導，該公司對該公司是否誇大了其用戶數量進行了調查。

But to add further insult to injury, the CEO of crypto analytics firm Nansen, Alex Svanevik, called for Donald Trump to “dismantle” the KYC and anti-money-laundering (AML) “complex.”

但是，為了進一步侮辱受傷，加密分析公司Nansen的首席執行官Alex Svanevik呼籲唐納德·特朗普“拆除” KYC和反罰款（AML）“複雜”。

Coinbase just proved again why centralized data honeypots are a disaster waiting to happen. KYC means handing over your identity to be leaked, sold, or extorted.The combination of data exposed here (real life addresses, crypto addresses and amount and real life id documents) is… pic.twitter.com/ZeOwpChZxO

Coinbase再次證明了為什麼集中的數據蜜餞是一場災難，等待發生。 KYC意味著要移交您的身份要洩漏，出售或勒索。在此曝光的數據組合（現實生活中的地址，加密貨幣地址，金額以及現實生活ID文件）是…pic.twitter.com/zeowpchzxo

— Alex (@alex_svt) August 25, 2023

- 亞歷克斯（@Alex_SVT）2023年8月25日

KYC checks involve verifying a user’s identity via various pieces of documentation. This can include government I.D., passports and utility bills.

KYC檢查涉及通過各種文檔驗證用戶的身份。這可以包括政府ID，護照和公用事業賬單。

However, as Svanevik says, all this does is compromise personal data for regular people—at an immense personal cost and in an endeavor that practically no real criminals are ever likely to be caught by.

但是，正如Svanevik所說，所有這些都是對普通人的個人數據的妥協 - 在巨大的個人成本中，並且在幾乎沒有真正的罪犯可能被抓住的努力中。

Coinbase leak puts KYC in the limelight

Coinbase洩漏使KYC成為眾人矚目的焦點

Svanevik is one of a number of high-profile crypto figures to criticize KYC measures. Indeed, Wintermute CEO Evgeny Gaevoy said that the fact Coinbase didn't disclose the leak sooner is "the dark side of the idiotic and nonsensical KYC/AML regime we live in."нон-sense. they could have disclosed it ealier

Svanevik是批評KYC措施的眾多備受矚目的加密數據之一。的確，溫特穆特首席執行官Evgeny Gaevoy說，Coinbase並未透露洩漏的事實是“我們所生活的愚蠢和荒謬的KYC/AML政權的陰暗面。”他們本來可以透露的

The good news is that the combo of data exposed here (real life addresses, crypto addresses and amount and real life id documents) is small enough that it seems like they're talking about a small number of targets. The bad news is that it seems like they're talking about a small number of targets.

好消息是，這裡暴露的數據組合（現實生活中的地址，加密貨幣地址，數量以及現實生活ID文檔）足夠小，似乎他們在談論少量目標。壞消息是，似乎他們在談論少數目標。

This is a mashup of several news articles but I highly recommend reading the full K-8 filing, it's quite interesting and an interesting perspective on the events that unfolded.

這是幾篇新聞文章的混搭，但我強烈建議您閱讀完整的K-8文件，這對發生的事件非常有趣且有趣。

Really interesting to see how the narrative is unfolding on the Coinbase K-8 filing. It seems like there's a common theme emerging: surprise at the lack of urgency from Coinbase to disclose the scam earlier. Here's a round-up of some reactions and analysis: pic.twitter.com/8jW8m67f8u

看到敘述是如何在Coinbase K-8歸檔上展開的。似乎有一個共同的主題出現：從Coinbase缺乏緊迫性來披露騙局的緊迫性。這是一些反應和分析的綜述：pic.twitter.com/8jw8m67f8u

Bitcoin wallet firm Nunchuk_io, meanwhile, responded by calling it a disaster that "can happen to anyone."

同時，比特幣錢包公司Nunchuk_io稱這是“任何人都可能發生的災難”。

"This is why we don’t collect KYC by default. It’s one more attack vector for people to use against you," added Nick Neuman, the CEO of wallet firm Casa.

“這就是為什麼我們默認情況下不收集KYC的原因。這是人們對您不利的攻擊向量。”

Crypto sleuth ZachXBT has also criticized KYC protections in the past, and highlighted how criminals are able to buy accounts fitted with verified KYC credentials in order to bypass checks.

Crypto Sleuth Zachxbt過去也批評了KYC的保護，並強調了犯罪分子如何購買配備有經過驗證的KYC憑證的帳戶以繞過檢查。

In 2023, Europol shuttered a criminal marketplace that sold the KYC credentials of over 2 million people. Some, however, like Gaevoy, believe KYC can still exist in the form of zero-knowledge proofs, a crypto-based technology that allows information to be verified without revealing the actual information enclosed.

2023年，歐洲刑警組織關閉了一個犯罪市場，該市場出售了超過200萬人的KYC證書。但是，像Gaevoy一樣，有些人認為KYC仍然可以以零知識證明的形式存在，這是一種基於加密的技術，可以驗證信息而不揭示所包含的實際信息。