Bitfinex 驳斥数据泄露指控，坚称没有妥协证据

Bitfinex 首席技术官 Paolo Ardoino 驳斥了黑客组织 Fsociety 涉嫌入侵加密货币交易所 Bitfinex 数据库并泄露客户数据的说法。 Ardoino 声称，由于缺乏赎金要求或数据库渗透的证据，人们对这些说法的真实性产生了怀疑，泄露的数据与 Bitfinex 用户记录之间的不匹配进一步证明了这一点。

Bitfinex Denounces Alleged Data Breach, Claims No Evidence of Compromise

Bitfinex 谴责涉嫌数据泄露，声称没有泄露证据

London, May 5, 2023 - Bitfinex, a leading cryptocurrency exchange, has vehemently denied claims by hacking group Fsociety that it successfully breached its database and compromised customer data.

伦敦，2023 年 5 月 5 日 - 领先的加密货币交易所 Bitfinex 强烈否认黑客组织 Fsociety 声称其成功入侵其数据库并泄露客户数据的说法。

Paolo Ardoino, Bitfinex's chief technology officer, categorically dismissed the allegations as "fake" in a statement released on May 4. He emphasized that a genuine hacker would have contacted Bitfinex directly through its established channels, such as the bug bounty program, customer support, or social media platforms, to demand a ransom.

Bitfinex 首席技术官 Paolo Ardoino 在 5 月 4 日发布的一份声明中断然驳斥了这些指控，称其为“虚假”。他强调，真正的黑客会通过其既定渠道直接联系 Bitfinex，例如错误赏金计划、客户支持、或社交媒体平台，索要赎金。

"We have meticulously examined our systems and found no evidence of any such request," Ardoino asserted.

“我们仔细检查了我们的系统，没有发现任何此类请求的证据，”阿尔多伊诺断言。

He further clarified that Bitfinex employs robust security measures to protect user information. "We do not store plaintext passwords or 2FA secrets in clear text, ensuring that even if a breach were to occur, sensitive data would remain inaccessible," Ardoino explained.

他进一步澄清，Bitfinex 采用强大的安全措施来保护用户信息。 Ardoino 解释说：“我们不会以明文形式存储明文密码或 2FA 机密，以确保即使发生泄露，敏感数据也将无法访问。”

Regarding the leaked data, Ardoino confirmed that only about 22% (approximately 5,000) of the 22,500 email and password combinations released by Fsociety actually match with Bitfinex user accounts. He suggested that the hackers likely aggregated data from multiple unrelated breaches and falsely attributed it to Bitfinex.

关于泄露的数据，Ardoino 证实，Fsociety 发布的 22,500 个电子邮件和密码组合中，只有约 22%（约 5,000 个）实际上与 Bitfinex 用户帐户匹配。他表示，黑客可能汇总了多个不相关违规事件的数据，并错误地将其归咎于 Bitfinex。

"Unfortunately, many users adopt the careless practice of using the same email address and password across various online services," Ardoino noted. "This makes it easier for malicious actors to compromise multiple accounts with a single successful attack."

“不幸的是，许多用户采取了粗心的做法，在各种在线服务中使用相同的电子邮件地址和密码，”阿多伊诺指出。 “这使得恶意行为者更容易通过一次成功的攻击来破坏多个帐户。”

Ardoino also cited information provided by a security researcher, who theorized that Fsociety's motive for fabricating the Bitfinex breach was to promote a data retrieval hacking tool.

Ardoino 还引用了一位安全研究人员提供的信息，该研究人员推测 Fsociety 捏造 Bitfinex 漏洞的动机是为了推广一种数据检索黑客工具。

"By creating a buzz around their supposed success in hacking high-profile companies and universities, they aim to showcase the capabilities of their tool and entice potential buyers to exploit vulnerabilities in target organizations," Ardoino explained.

Ardoino 解释说：“他们通过宣传自己在攻击知名公司和大学方面取得的成功，旨在展示其工具的功能，并吸引潜在买家利用目标组织中的漏洞。”

Despite the allegations, Ardoino reassured users that Bitfinex is conducting a thorough investigation and has not detected any evidence of a breach to date. He emphasized that "all funds are safe" and urged users to remain vigilant against potential phishing attempts.

尽管受到这些指控，Ardoino 仍向用户保证 Bitfinex 正在进行彻底调查，迄今为止尚未发现任何违规证据。他强调“所有资金都是安全的”，并敦促用户对潜在的网络钓鱼企图保持警惕。

Bitfinex has faced scrutiny over data breach concerns in the past. In 2023, a customer support agent's compromised account led to phishing attacks targeting Bitfinex users, although the company reported minimal damage. More significantly, in 2016, Bitfinex suffered a major security breach resulting in the theft of approximately $70 million worth of Bitcoin, which would be valued at over $7.6 billion today.

Bitfinex 过去曾因数据泄露问题而面临审查。 2023 年，一名客户支持代理的帐户遭到入侵，导致针对 Bitfinex 用户的网络钓鱼攻击，尽管该公司报告称损失很小。更重要的是，2016 年，Bitfinex 遭遇重大安全漏洞，导致价值约 7000 万美元的比特币被盗，如今这些比特币的价值超过 76 亿美元。

Bitfinex remains committed to maintaining the highest levels of security for its customers and will continue to invest in its infrastructure and protocols to safeguard their data and assets.

Bitfinex 仍然致力于为其客户维护最高级别的安全性，并将继续投资其基础设施和协议以保护他们的数据和资产。