Coinbase泄漏使KYC成为众人瞩目的焦点

Coinbase周四分享并在K-8文件中记录的泄漏揭示了海外支持人员如何被坏演员腐败，以窃取信息，包括家庭住址，政府ID和银行帐户详细信息。

Several crypto executives took to X to call for know-your-customer (KYC) protocols to be scrapped following reports that leading U.S. exchange Coinbase (NASDAQ:COIN) had disclosed its staff were accepting bribes and leaking users’ personal data.

在报道的报告中，有几位加密高管呼吁X呼吁知识客户（KYC）协议，该协议是在报道的报告中，领导美国交易所Coinbase（NASDAQ：COIN）披露了其员工正在接受贿赂并泄露用户的个人数据。

This new data leak, which was shared by Coinbase on Thursday and documented in a K-8 filing, saw how overseas-based support staff were corrupted by bad actors into stealing information—including home addresses, government I.D. and bank account details—which was then leaked to individuals planning to use it for social engineering scams designed to steal user funds.

Coinbase周四共享了这一新数据泄漏，并在K-8文件中记录了这一新数据泄漏，该数据泄漏看到了基于不良演员的海外支持人员如何破坏窃取信息（包括家庭地址，政府ID和银行帐户详细信息），然后将其泄漏给计划将其用于窃取用户资金的社会工程骗局的个人泄漏。

This may yet cost Coinbase between $180 million and $400 million in reimbursements, while the exchange is also having to deal with the fallout from the Securities and Exchange Commission reportedly launching an investigation into whether the firm exaggerated its user numbers.

这可能会花费在1.8亿至4亿美元的报销中，而交易所还必须处理证券和交易委员会的后果，据报道，该公司对该公司是否夸大了其用户数量进行了调查。

But to add further insult to injury, the CEO of crypto analytics firm Nansen, Alex Svanevik, called for Donald Trump to “dismantle” the KYC and anti-money-laundering (AML) “complex.”

但是，为了进一步侮辱受伤，加密分析公司Nansen的首席执行官Alex Svanevik呼吁唐纳德·特朗普“拆除” KYC和反罚款（AML）“复杂”。

Coinbase just proved again why centralized data honeypots are a disaster waiting to happen. KYC means handing over your identity to be leaked, sold, or extorted.The combination of data exposed here (real life addresses, crypto addresses and amount and real life id documents) is… pic.twitter.com/ZeOwpChZxO

Coinbase再次证明了为什么集中的数据蜜饯是一场灾难，等待发生。 KYC意味着要移交您的身份要泄漏，出售或勒索。在此曝光的数据组合（现实生活中的地址，加密货币地址，金额以及现实生活ID文件）是…pic.twitter.com/zeowpchzxo

— Alex (@alex_svt) August 25, 2023

- 亚历克斯（@Alex_SVT）2023年8月25日

KYC checks involve verifying a user’s identity via various pieces of documentation. This can include government I.D., passports and utility bills.

KYC检查涉及通过各种文档验证用户的身份。这可以包括政府ID，护照和公用事业账单。

However, as Svanevik says, all this does is compromise personal data for regular people—at an immense personal cost and in an endeavor that practically no real criminals are ever likely to be caught by.

但是，正如Svanevik所说，所有这些都是对普通人的个人数据的妥协 - 在巨大的个人成本中，并且在几乎没有真正的罪犯可能被抓住的努力中。

Coinbase leak puts KYC in the limelight

Coinbase泄漏使KYC成为众人瞩目的焦点

Svanevik is one of a number of high-profile crypto figures to criticize KYC measures. Indeed, Wintermute CEO Evgeny Gaevoy said that the fact Coinbase didn't disclose the leak sooner is "the dark side of the idiotic and nonsensical KYC/AML regime we live in."нон-sense. they could have disclosed it ealier

Svanevik是批评KYC措施的众多备受瞩目的加密数据之一。的确，温特穆特首席执行官Evgeny Gaevoy说，Coinbase并未透露泄漏的事实是“我们所生活的愚蠢和荒谬的KYC/AML政权的阴暗面。”他们本来可以透露的

The good news is that the combo of data exposed here (real life addresses, crypto addresses and amount and real life id documents) is small enough that it seems like they're talking about a small number of targets. The bad news is that it seems like they're talking about a small number of targets.

好消息是，这里暴露的数据组合（现实生活中的地址，加密货币地址，数量以及现实生活ID文档）足够小，似乎他们在谈论少量目标。坏消息是，似乎他们在谈论少数目标。

This is a mashup of several news articles but I highly recommend reading the full K-8 filing, it's quite interesting and an interesting perspective on the events that unfolded.

这是几篇新闻文章的混搭，但我强烈建议您阅读完整的K-8文件，这对发生的事件非常有趣且有趣。

Really interesting to see how the narrative is unfolding on the Coinbase K-8 filing. It seems like there's a common theme emerging: surprise at the lack of urgency from Coinbase to disclose the scam earlier. Here's a round-up of some reactions and analysis: pic.twitter.com/8jW8m67f8u

看到叙述是如何在Coinbase K-8归档上展开的。似乎有一个共同的主题出现：从Coinbase缺乏紧迫性来披露骗局的紧迫性。这是一些反应和分析的综述：pic.twitter.com/8jw8m67f8u

Bitcoin wallet firm Nunchuk_io, meanwhile, responded by calling it a disaster that "can happen to anyone."

同时，比特币钱包公司Nunchuk_io称这是“任何人都可能发生的灾难”。

"This is why we don’t collect KYC by default. It’s one more attack vector for people to use against you," added Nick Neuman, the CEO of wallet firm Casa.

“这就是为什么我们默认情况下不收集KYC的原因。这是人们对您不利的攻击向量。”

Crypto sleuth ZachXBT has also criticized KYC protections in the past, and highlighted how criminals are able to buy accounts fitted with verified KYC credentials in order to bypass checks.

Crypto Sleuth Zachxbt过去也批评了KYC的保护，并强调了犯罪分子如何购买配备有经过验证的KYC凭证的帐户以绕过检查。

In 2023, Europol shuttered a criminal marketplace that sold the KYC credentials of over 2 million people. Some, however, like Gaevoy, believe KYC can still exist in the form of zero-knowledge proofs, a crypto-based technology that allows information to be verified without revealing the actual information enclosed.

2023年，欧洲刑警组织关闭了一个犯罪市场，该市场出售了超过200万人的KYC证书。但是，像Gaevoy一样，有些人认为KYC仍然可以以零知识证明的形式存在，这是一种基于加密的技术，可以验证信息而不揭示所包含的实际信息。