Bitfinex 涉嫌大规模数据泄露引发危险信号

在加密货币市场的上涨趋势中，有关热门交易所 Bitfinex 的数据泄露的消息不断出现。据链上侦探 Shinoji Research 指控，40 万客户的 2.5 TB 数据和信息被盗。 Bitfinex 尚未确认此次泄露事件，但 Tether 首席执行官兼 Bitfinex 首席技术官 Paolo Ardoino 驳斥了其真实性，指出泄露数据不一致，并且与涉嫌攻击者没有联系。

Alleged Data Breach at Bitfinex Raises Concerns

Bitfinex 涉嫌数据泄露引发担忧

Amidst the recent resurgence of the cryptocurrency market, news of a potential data breach at Bitfinex has surfaced. According to allegations, the exchange may have suffered a data leak involving approximately 2.5 terabytes of data and the personal information of 400,000 customers.

最近，随着加密货币市场的复苏，有关 Bitfinex 潜在数据泄露的消息浮出水面。据指控，该交易所可能遭受数据泄露，涉及约 2.5 TB 数据和 40 万客户的个人信息。

On-Chain Detective Raises Allegations

链上侦探提出指控

The allegations stem from Shinoji Research, an on-chain detective, which claims that the cryptocurrency exchange Bitfinex experienced a data breach potentially affecting 400,000 users. The stolen data allegedly includes 2.5 terabytes of information. Bitfinex has yet to confirm this information.

这些指控来自链上侦探 Shinoji Research，该公司声称加密货币交易所 Bitfinex 经历了数据泄露，可能影响 40 万用户。据称，被盗数据包括 2.5 TB 的信息。 Bitfinex 尚未确认这一信息。

Shinoji Research further asserts that the FSociety ransomware group is responsible for the attack. The detective provided links to a page containing usernames and plaintext passwords, suggesting that the hackers may have gained access to sensitive user information.

Shinoji Research 进一步断言，FSociety 勒索软件组织对此次攻击负责。侦探提供了包含用户名和明文密码的页面链接，表明黑客可能已经获得了敏感用户信息的访问权限。

Leaked KYC Documents Threaten to Expose User Identities

泄露的 KYC 文件可能会暴露用户身份

The alleged size of the stolen data indicates that the hackers could potentially possess all KYC (Know Your Customer) documents submitted by Bitfinex users since the exchange's inception. The hackers have reportedly threatened to release these KYC documents if their demands are not met.

据称被盗数据的规模表明，黑客可能拥有 Bitfinex 用户自交易所成立以来提交的所有 KYC（了解您的客户）文件。据报道，黑客威胁称，如果不满足他们的要求，他们将公布这些 KYC 文件。

In a test conducted by a Shinoji Research follower, one of the leaked passwords was verified, confirming the potential validity of the breach.

在 Shinoji Research 的一名追随者进行的测试中，其中一个泄露的密码得到了验证，确认了此次泄露的潜在有效性。

Tether CEO Disputes Data Breach Claim

Tether 首席执行官对数据泄露索赔提出异议

In response to the allegations, Paolo Ardoino, the CEO of Tether and CTO of Bitfinex, issued a statement on the X platform, arguing that the Bitfinex data leak was likely a fabricated event. Ardoino presented several justifications for his assertion:

针对这些指控，Tether 首席执行官兼 Bitfinex 首席技术官 Paolo Ardoino 在 X 平台上发表声明，认为 Bitfinex 数据泄露很可能是捏造事件。阿多伊诺为他的主张提出了几个理由：

• The sample data released by the alleged hackers contains 22,500 email and password records, while Bitfinex does not store plaintext passwords or 2FA passwords in plaintext.
• Only 5,000 of the 22,500 emails match active Bitfinex users.
• The suspected hackers have not contacted Bitfinex with any demands, which is unusual behavior for individuals possessing genuine sensitive information.

Bitfinex CTO Assures Funds Safety

涉嫌黑客发布的样本数据包含22,500封电子邮件和密码记录，而Bitfinex不以明文形式存储明文密码或2FA密码。22,500封电子邮件中只有5,000封与活跃的Bitfinex用户匹配。涉嫌黑客尚未与Bitfinex联系提出任何要求，对于拥有真正敏感信息的个人来说，这是不寻常的行为。Bitfinex 首席技术官确保资金安全

In a separate statement, the CTO of Bitfinex addressed the allegations and characterized them as "pure FUD" (fear, uncertainty, and doubt). The CTO emphasized that funds held on the platform remain safe and that the exchange is conducting a thorough investigation to ascertain the veracity of the claims.

Bitfinex 首席技术官在另一份声明中回应了这些指控，并将其描述为“纯粹的 FUD”（恐惧、不确定性和怀疑）。首席技术官强调，平台上持有的资金仍然安全，交易所正在进行彻底调查，以确定指控的真实性。

The CTO highlighted that:

首席技术官强调：

• Various security researchers have overstated the severity of the alleged breach.
• The hackers likely compiled a database of email and password combinations from other breaches, as users often reuse credentials across multiple platforms.
• A comprehensive analysis of Bitfinex systems has revealed no evidence of a breach.

Ongoing Investigation and Call for Vigilance

各种安全研究人员都夸大了所指控的违规行为的严重性。黑客可能编制了来自其他违规行为的电子邮件和密码组合的数据库，因为用户经常在多个平台上重复使用凭据。对 Bitfinex 系统的全面分析没有发现任何违规行为的证据。正在进行的调查并呼吁保持警惕

The allegations of a data breach at Bitfinex have sparked investigations by security researchers and the exchange itself. While the exchange has expressed skepticism about the validity of the claims, it has stated that it is monitoring the situation closely.

关于 Bitfinex 数据泄露的指控引发了安全研究人员和交易所本身的调查。尽管该交易所对这些说法的有效性表示怀疑，但表示正在密切关注事态发展。

Users of Bitfinex are advised to remain vigilant and monitor their accounts for any unauthorized activity. It is essential to practice good security measures, such as using strong and unique passwords, enabling two-factor authentication, and being aware of phishing attempts.

建议 Bitfinex 用户保持警惕并监控其账户是否有任何未经授权的活动。采取良好的安全措施至关重要，例如使用强而独特的密码、启用双因素身份验证以及警惕网络钓鱼尝试。

The outcome of the investigation and the potential impact on Bitfinex users remain uncertain. As more information becomes available, it will be reported accordingly.

调查结果以及对 Bitfinex 用户的潜在影响仍不确定。随着更多信息的出现，我们将进行相应的报告。