DAVID YAFFE-BELLANY2026年11月2日全球最大加密货币交易所币安表示，这起被业内称为史上最大规模加密货币黑客攻击的事件涉及约63亿美元资金。 SeongJoon Cho/BloombergAt about 4:20 p.m. on Thursday, a string of unusual transactions started to cause alarm at Binance, the world’s largest cryptocurrency exchange.周四下午4点20分左右，一连串异常交易开始引起全球最大加密货币交易所币安的警觉。Money was pouring out of the company’s accounts, a multibillion-dollar deluge of digital coins. It had all the hallmarks of a crypto heist — a high-speed bank robbery conducted over the internet.资金正从公司的账户中大量流出，价值数十亿美元的数字货币如洪水般倾泻而去。种种迹象都表明，这是一场加密货币盗窃案——一场在互联网上高速进行的银行抢劫。As the news spread, Binance’s top executives put together an informal war room on Wea, the company’s internal messaging system, with about 100 participants, including specialized cryptocurrency tracers and security personnel.随着消息传开，币安高管在公司内部通讯系统Wea上临时组建起一个危机应对群组，约有100人参与，其中包括专门追踪加密货币流向的专家和安全人员。They eventually transitioned to a mass conference call, with 100 boxes on the screen, where employees took turns muting and then unmuting, communicating in a mixture of English and Chinese. Among them was He Yi, Binance’s co-chief executive, who is seven months pregnant, and worked through the night from her base in Abu Dhabi, taking a call at 3 a.m. local time.后来，他们转而召开大型电话会议，屏幕上显示着100个视频窗口。员工们轮流关闭和打开麦克风，时而说英语，时而说中文。参与者中包括币安联席首席执行官何一。怀孕七个月的她在阿布扎比的办公地点彻夜工作，当地时间凌晨3点还在接听电话。Ms. He and her colleagues were navigating one of the most damaging crises in Binance’s long and troubled history. A team of North Korean hackers had penetrated the exchange and drained more than $6 billion in the largest crypto heist of all time. Binance was forced to halt deposits and withdrawals, and posted a series of frantic messages on X, promising that it would cover any losses.何一和她的同事们正在应对币安漫长而风波不断的历史上最具破坏性的危机之一。一个朝鲜黑客团队侵入了这家交易所，盗走逾60亿美元，制造了有史以来规模最大的加密货币盗窃案。币安被迫暂停充值和提现，并在X平台上发布一系列措辞急切的消息，承诺承担所有损失。It was a surreal situation made even more surreal by the actions of Binance’s founder, Changpeng Zhao, who spent the evening narrating the events to his 12.9 million followers on X. He posted prayer hand emojis, publicly jousted with the site’s owner, Elon Musk, and insisted that “user funds are SAFU” — using a bit of crypto slang to reassure customers that hundreds of millions of dollars in deposits would not simply vanish into thin air.这场危机本已令人难以置信，而币安创始人赵长鹏的举动又给它增添了几分超现实色彩。他整晚都在X平台上向自己的1290万名粉丝实时讲述事态进展。他发布双手合十的表情符号，与X平台所有者埃隆·马斯克公开交锋，还坚称“用户资金SAFU”，这是借用币圈的行话向客户保证，他们数亿美元的存款不会凭空消失。“It hurts, but we will survive,” Mr. Zhao declared.“这很痛苦，但我们会挺过去的。”赵长鹏宣称。币安创始人赵长鹏，摄于8月。黑客攻击当晚，他通宵在X上向1290万粉丝描述事件进展。The impact of the Binance attack rippled across the crypto industry, from Abu Dhabi to New York, setting off a frantic effort to salvage some of the stolen funds and prompting law enforcement inquiries. This account of how the hack unfolded is based on interviews with four people with knowledge of the events, as well as analyses by crypto forensics firms and documents reviewed by The New York Times.币安遭受攻击的影响波及整个加密货币行业，从阿布扎比到纽约，各方慌忙采取紧急行动，试图追回部分被盗资金，也促使执法机构开始介入调查。基于对四名知情人士的采访、加密货币取证公司的分析，以及《纽约时报》查阅的相关文件，本文对这场黑客攻击经过进行了还原。For years, Binance has been the most important and contentious company in the crypto world. After Mr. Zhao founded it in 2017, it quickly turned into a behemoth, the No. 1 destination for customers looking to convert traditional currencies into digital coins like Bitcoin and Ether.多年来，币安一直是币圈最重要也最具争议的公司。赵长鹏2017年创立币安后，该公司迅速发展成为行业巨头，成为希望将传统货币兑换成比特币、以太币等数字货币的客户首选平台。 It also became a haven for crime. In 2023, Binance pleaded guilty to anti-money-laundering violations that had allowed criminals to move money and paid $4.3 billion in penalties to U.S. regulators. Mr. Zhao was sentenced to four months in prison.但币安也成了犯罪活动的温床。2023年，币安承认违反反洗钱规定，致使犯罪分子得以通过其平台转移资金，并向美国监管机构支付了43亿美元罚款。赵长鹏被判处四个月监禁。For all its troubles, however, Binance never lost popularity among the crypto faithful. It remains the world’s largest exchange by a distance, and Mr. Zhao, who lives in Abu Dhabi, is something of an industry folk hero. Binance’s main platform is banned in the United States. But last year, the company forged a business relationship with World Liberty Financial, the Trump family crypto start-up. President Trump granted a pardon to Mr. Zhao last October, paving the way for Binance to expand into the U.S. market.尽管麻烦不断，币安在加密货币忠实拥趸中的人气却始终不减。它仍然以遥遥领先的优势稳居全球最大加密货币交易所的地位，而居住在阿布扎比的赵长鹏在业内俨然是一位民间英雄。币安的主要交易平台在美国被禁，但去年，该公司与特朗普家族创办的加密货币初创企业世界自由金融公司建立了业务关系。去年10月，特朗普总统赦免了赵长鹏，为币安拓展美国市场铺平了道路。 But on the night of Oct. 29, the company had to deal with the aftermath of the $6 billion hack.然而，10月29日夜里，币安不得不面对这场60亿美元黑客攻击造成的后果。Such attacks have become commonplace in the crypto world. In February 2025, the North Koreans stole $1.5 billion from Bybit, a rival exchange. Bybit was breached after Ben Zhou, its chief executive, approved a seemingly routine transaction that granted the thieves access to the exchange’s internal system.此类攻击在加密货币领域已司空见惯。2025年2月，朝鲜人从币安的竞争对手Bybit盗走15亿美元。Bybit被入侵是因为其首席执行官周雨辰批准了一笔看似常规的交易，使窃贼得以进入交易所内部系统。It’s not clear precisely how the North Koreans got around Binance’s defenses. An initial investigation pointed to a compromised laptop, Binance said Friday. But the company later said it had uncovered “additional points of breach.”目前尚不清楚朝鲜黑客究竟是如何突破了币安的防御系统。币安周五表示，初步调查指向一台遭到入侵的笔记本电脑。但该公司后来又称，发现了“更多入侵点”。Much of the drama played out in public. Almost all crypto transactions are recorded on the blockchain, a ledger of money movements that anyone can look up. That meant crypto analysts could see funds leaving Binance in real time.这场危机的许多情节都在公众眼皮底下上演。几乎所有加密货币交易都会记录在区块链上，这是一套任何人都可以查询的资金流动账本。这意味着，加密货币分析师能够实时看到资金从币安流出。On Thursday afternoon, Jonathan Levin, the chief executive of the crypto analytics firm Chainalysis, was on a video call with a former senior U.S. official, discussing the need for the U.S. government to deploy cyber attacks against adversaries. Then Mr. Levin got the news about Binance.周四下午，加密货币分析公司Chainalysis首席执行官乔纳森·莱文正在与一名前美国高级官员视频通话，讨论美国政府有必要对敌对势力动用网络攻击手段。就在这时，莱文收到了币安遭到攻击的消息。“I looked at my phone and was like, ‘Oh, this doesn’t look good,’” he said in an interview.“我看了一眼手机，心想，‘哦，情况看起来不妙。’”他在接受采访时说。A group of Chainalysis employees gathered in a conference room in New York named “Silk Road,” after another crypto platform that was famously hacked. They worked until the early hours of Friday morning, eating Malaysian food and analyzing transactions to get a clearer picture of what had happened. 一群Chainalysis员工聚集在纽约一间名为“丝绸之路”的会议室里。这个名字来自另一个曾因遭到黑客攻击而闻名的加密货币平台。他们一边吃着马来西亚菜，一边分析交易记录，一直工作到周五凌晨，试图进一步厘清究竟发生了什么。Soon both Chainalysis and another analytics firm, TRM Labs, attributed the attack to an elite North Korean hacking unit called TraderTraitor. The F.B.I. confirmed their findings. North Koreans have targeted crypto companies for years, using the proceeds of those thefts to fund its nuclear program, according to Western officials.不久，Chainalysis和另一家分析公司TRM Labs都认定，这次攻击出自朝鲜一个名为TraderTraitor的精锐黑客组织。美国联邦调查局证实了他们的调查结果。西方官员表示，朝鲜多年来一直将加密货币公司作为攻击目标，并利用窃取的资金资助其核武器计划。The hackers have developed increasingly complex strategies to steal crypto and launder the proceeds, a painstaking endeavor that can take months to complete. In a blog post on Friday, Chainalysis said the attackers had deployed “laundering patterns we have not seen before,” conducting thousands of transactions over a short period, probably with the help of automation.黑客们开发出越来越复杂的策略来窃取加密货币并洗白收益，这一过程十分繁琐，可能需要数月才能完成。Chainalysis周五在一篇博客文章中说，攻击者使用了“我们从未见过的洗钱模式”，在短时间内进行数千笔交易，可能借助了自动化工具。At the same time, Binance’s colleagues in the industry mobilized to intercept some of the laundered crypto. Certain digital coin issuers can freeze funds, allowing them to halt a money-laundering operation in its tracks.与此同时，币安的行业同行也行动起来，试图拦截部分被洗白的加密货币。某些数字货币发行方可以冻结资金，从而及时阻止洗钱操作。Soon after the hack, Tether and Circle, two major issuers, announced that they had frozen stashes of their own coins that the hackers had seized from Binance, a combined total of more than $2 billion in crypto. Binance is now working to gain access to those funds, the company said.黑客攻击发生后不久，两家主要数字货币发行商Tether和Circle宣布，已冻结黑客从币安窃取的部分由它们发行的数字货币，总价值超过20亿美元。币安表示，目前正设法重新取得这些资金的控制权。But $2.4 billion in crypto is already “beyond any issuer’s reach,” according to TRM. In a social media post on Friday, Binance said that it had set aside $6.34 billion to cover losses from the hack.但TRM指出，已有价值24亿美元的加密货币“超出了任何发行商能够控制的范围”。币安周五在社交媒体发文称，已拨出63.4亿美元，用于弥补此次黑客攻击造成的损失。How much money Binance has in reserve is not publicly known. After midnight, Mr. Musk posted a grimacing emoji underneath an X post comparing Mr. Zhao to Sam Bankman-Fried, the disgraced crypto mogul whose FTX exchange collapsed in 2022.币安究竟持有多少储备资金，外界并不清楚。午夜过后，马斯克在一条将赵长鹏比作萨姆·班克曼-弗里德的X帖子下发布了一个龇牙表情；后者是声名狼藉的加密巨头，其创办的FTX交易所于2022年倒闭。 “Bad time to troll,” Mr. Zhao responded. “Please stop.” He noted that Binance owns over $1 billion in shares in SpaceX, Mr. Musk’s rocket company.“现在不是起哄的时候，”赵长鹏回应道。“请住手。”他指出，币安持有马斯克火箭公司SpaceX超过10亿美元的股份。赵长鹏周五在X上与埃隆·马斯克打起了口水仗。Mr. Zhao’s comment got the attention of Ms. He, Binance’s co-chief executive and his longtime romantic partner. (Mr. Zhao is Binance’s majority shareholder but doesn’t have a formal role at the company.)赵长鹏的这番话引起了币安联席首席执行官何一的注意。何一也是他多年的伴侣。（赵长鹏是币安的控股股东，但并未在公司担任正式职务。）“Our company’s revenue for the year is sufficient to cover the losses, so we do not yet need to sell the SpaceX shares,” Ms. He wrote.“我们公司今年的收入足以覆盖这次损失，因此目前还不需要出售SpaceX的股份。”何一写道。With the industry reeling, Ms. He and her co-chief executive, Richard Teng, told Binance employees to “stay disciplined,” according to a message reviewed by The Times.据《纽约时报》看到的一条内部信息，在行业震荡之际，何一和联合首席执行官邓伟政要求币安员工要“严守纪律”。 "Do not speculate internally or externally,” the message said. “We know this is an intense moment, and we deeply appreciate everyone working overtime to make this right.”“无论在公司内外，都不要妄加猜测，”信息写道。“我们知道现在形势严峻，非常感谢大家加班加点，努力解决问题。” They also tried to address the growing unease in the crypto world. Speaking in Mandarin in a video posted to X on Friday, Ms. He said that the rise of artificial intelligence had turned hacking into “a threat to the entire industry.”他们还试图回应币圈日益加剧的不安。周五在X发布的一段视频中，何一用普通话表示，人工智能的兴起已使黑客攻击成为“整个行业的威胁”。“Of course, there are many things that we have done wrong,” she said. “We should have invested in security much earlier and more extensively, and established more rigorous standards.”“当然，我们也有很多做得不对的地方。”她说，“我们应该更早地、更多地去做安全投入，建立更严谨的标准。”Word of Binance’s hack even reached Mr. Trump, who was asked about it by a reporter on Friday. “People never see the money anymore,” he said. “I’ve always felt it was a little bit dangerous. But they say they have it pretty much under control. We’ll see.”币安被攻击的消息甚至传到了特朗普那里，周五有记者问及此事。“人们再也看不到钱了，”他说。“我一直觉得这有点危险。但他们说基本控制住了。我们拭目以待。” Among the companies that rushed to Binance’s aid was the Trump family firm, World Liberty, the issuer of a coin known as USD1.在迅速向币安伸出援手的公司中，包括特朗普家族的世界自由金融。这家公司发行了一种名为USD1的数字货币。 Zach Witkoff, the company’s chief executive and the son of one of Mr. Trump’s top advisers, announced on X that World Liberty had frozen $27 million in USD1 that was “associated with the Binance hack.”该公司首席执行官扎克·威特科夫是特朗普一名高级顾问的儿子。他在X平台宣布，世界自由金融已冻结价值2700万美元与“币安黑客攻击事件有关”的USD1。“We stand by our industry partners,” he wrote.“我们坚定支持业内合作伙伴。”他写道。“Thank you!” Mr. Zhao responded, followed by three prayer hand emojis. “谢谢！”赵长鹏回复道，后面跟着三个双手合十的表情符号。傅才德(Michael Forsythe)和Dustin Volz对本文有报道贡献。David Yaffe-Bellany自纽约为时报报道加密货币行业新闻。可以通过电子邮件联系他：davidyb@nytimes.com翻译：杜然点击查看本文英文版。