加密交易所Coinbase的最新数据泄露事件引起了人们对用户安全的担忧

Coinbase是全球第三大加密货币交易所，确认其每月交易的每月用户中只有不到1％的攻击受到影响，该攻击可能会花费高达4亿美元的报销费用

A recent data breach at crypto exchange Coinbase has raised concerns about user safety after hackers gained access to sensitive information, including home addresses.

加密交易所Coinbase的最新数据泄露事件引起了对黑客获得访问敏感信息（包括家庭住址）的担忧。

Coinbase, the world’s third-largest cryptocurrency exchange, confirmed that less than 1% of its transacting monthly users were affected in an attack that may cost the exchange up to $400 million in reimbursement expenses, Cointelegraph reported on May 15.

Cointelegraph报道，Coinbase是世界第三大加密货币交易所，确认其每月交易的每月用户中只有不到1％的攻击受到影响，该袭击可能使交易所损失高达4亿美元的报销费用。

However, the “human cost” of this data breach may be much higher for users, according to Michael Arrington, the founder of TechCrunch and Arrington Capital.

但是，根据TechCrunch和Arrington Capital的创始人迈克尔·阿灵顿（Michael Arrington）的说法，用户的“人为成本”可能要高得多。

“Very disappointed in Coinbase right now. Using the cheapest option for customer service has its price,” Arrington said in a May 20 X post, adding:

“现在对Coinbase感到非常失望。使用最便宜的客户服务的选择有其价格。”阿灵顿在5月20日的帖子中说：

Very disappointed in @Coinbase right now. Using the cheapest option for customer service has its price.https://t.co/M9p55L7P9v

现在对@coinbase感到非常失望。使用最便宜的客户服务的选项具有其价格。

— Michael Arrington (@arrington) May 20, 2024

- 迈克尔·阿灵顿（@Arrington）2024年5月20日

While no passwords, private keys or account funds were exposed, cybercriminals reportedly bribed overseas customer service contractors to access internal systems. This allowed them to steal personal data that could be used in social engineering scams or even physical extortion attempts.

尽管没有曝光密码，私钥或帐户资金，但据报道，网络犯罪分子贿赂了海外客户服务承包商来访问内部系统。这使他们能够窃取可用于社会工程骗局甚至物理勒索尝试中的个人数据。

With Bitcoin (BTC) trading above $100,000, crypto wealth has become a growing target for criminals. Experts warn that leaked address data could expose high-net-worth individuals to real-world risks.

随着比特币（BTC）的交易超过100,000美元，加密货币财富已成为犯罪分子的越来越多的目标。专家警告说，泄漏的地址数据可能会使高净值个人面临现实世界中的风险。

On May 16, Cointelegraph reported on six violent robberies that targeted cryptocurrency investors, aiming to extort digital assets via kidnapping or torture.

5月16日，Cointelegraph报道了六次暴力抢劫，这些抢劫针对加密货币投资者，旨在通过绑架或酷刑勒索数字资产。

In a ruthless attack on May 4, the father of a French crypto entrepreneur was abducted in Paris, France. The kidnappers cut the victim’s finger and sent a video to his son, demanding 5 million euros in crypto.

在5月4日的无情袭击中，法国加密企业家的父亲在法国巴黎被绑架。绑架者割断了受害者的手指，并向儿子发送了一段视频，要求在加密货币中提供500万欧元。

The victim was held for two days before French police were able to find and rescue him. According to CNN, five people were arrested in connection with the kidnapping.

在法国警察能够找到并营救他之前，受害人被关押了两天。根据美国有线电视新闻网（CNN）的说法，五人与绑架有关。

To prevent similar user data breaches, crypto exchanges need to adopt a “layered defense strategy,” according to Ronghui Gu, the co-founder of CertiK Web3 security firm.

Certik Web3安全公司Ronghui GU表示，为防止类似的用户数据泄露，加密交易所需要采用“分层防御策略”。

“This can include privileged access management, zero trust architecture, multifactor authentication across internal systems, and continuous monitoring with behavioral analytics,” Gu told Cointelegraph, adding:

“这可以包括特权访问管理，零信任体系结构，跨内部系统的多因素身份验证以及通过行为分析的连续监视，” GU告诉Cointelegraph，并补充说：

Crypto platforms will need to rethink their security posture as attackers are increasingly targeting human vulnerabilities rather than technical ones. This includes recognizing the threat of social engineering schemes.

加密平台将需要重新考虑其安全姿势，因为攻击者越来越多地针对人类脆弱性而不是技术脆弱性。这包括认识社会工程计划的威胁。

However, crypto platforms will need to “rethink their security posture” as attackers “increasingly target human vulnerabilities rather than technical ones,” added Gu, warning of the rising threat of social engineering schemes.

但是，加密平台将需要“重新考虑其安全姿势”，因为攻击者“越来越针对人类的脆弱性，而不是技术脆弱性”。

Social engineering schemes, such as phishing scams, were the most significant security threat of 2024, costing the industry over $1 billion across 296 incidents, according to CertiK.

根据Certik的说法，社会工程计划（例如网络钓鱼骗局）是2024年最重大的安全威胁，在296起事件中，该行业损失了超过10亿美元的行业。