EMMY MARTIN2026年11月4日黑客利用一台电脑和一个内部人工智能工具控制了币安钱包团队两名工程师的电脑。 Gabby Jones/BloombergBinance, the world’s largest cryptocurrency exchange, said on Tuesday that the hackers behind last week’s $6.3 billion theft had spent months preparing for the heist, luring an employee with a fake job interview and planting tampered software before using the company’s artificial intelligence tool to reach its wallet systems.全球最大加密货币交易所币安周二表示，上周63亿美元窃案背后的黑客为此次盗窃筹备了数月：用虚假面试引诱一名员工，植入被篡改的软件，再利用公司的人工智能工具侵入钱包系统。Someone posing as a project director contacted a Binance software engineer in September through a job-hunting platform, according to the company’s initial report on the attack. After two rounds of interviews, including a live video call with someone purporting to be a human resources representative, the engineer was told to download an “assignment” onto his work computer. The file contained malicious code that the company’s security tools failed to detect.根据币安关于此次攻击的初步报告，有人冒充项目总监，于9月通过一个求职平台联系了币安一名软件工程师。经过两轮面试，包括与一名自称人力资源代表的人的视频通话，该工程师被要求下载一份“作业”到工作电脑。该文件含有恶意代码，币安安全工具未能检出。On Oct. 20, the week before the theft, the hackers used that computer and an internal Binance A.I. tool to take control of the work computers of two engineers on Binance’s wallet team, one of whom had permissions to deploy software. Nine days later, they used that permission to gain access to a service that signs transactions and began draining the exchange’s hot wallets, which hold assets for quick withdrawals, over nearly four hours.10月20日，即窃案发生前一周，黑客利用那台电脑和币安一个内部人工智能工具控制了币安钱包团队两名工程师的工作电脑，其中一人拥有软件部署权限。九天后，黑客利用该权限进入一个交易签名服务，在近四小时内开始清空交易所热钱包。热钱包持有用于快速提款的资产。“This should not have happened,” the company said in the report.“这本来不应该发生，”币安在报告中表示。The report is the most detailed account to date of by far the largest theft in the history of the crypto industry, which has long been a target for hackers drawn to large pools of digital assets that can be moved across borders in minutes. The previous record was set in February 2025, when hackers stole about $1.5 billion in digital tokens from Bybit, a Dubai-based exchange.该报告是迄今为止对加密货币行业有史以来最大盗窃案最详细的叙述。该行业长期是黑客目标：大量数字资产可在几分钟内跨境转移，对黑客极具吸引力。此前纪录是2025年2月，黑客从总部位于迪拜的交易所Bybit窃取约15亿美元数字代币。The hack is also the latest blow to Binance, which has a history of legal trouble. In 2023, Binance pleaded guilty to breaking U.S. anti-money-laundering laws and paid $4.3 billion in penalties. Binance’s founder, the crypto billionaire Changpeng Zhao, served four months in federal prison and later got a pardon from President Trump.此次攻击也是对屡屡陷入法律麻烦的币安的最新打击。2023年，币安承认违反美国反洗钱法，支付了43亿美元罚款。币安创始人、加密货币亿万富翁赵长鹏在联邦监狱服刑四个月，后来获特朗普总统赦免。On Saturday, the F.B.I. said that the attack on Binance was carried out by TraderTraitor, a North Korean hacking unit. North Korea has denied the accusation. Binance said it had caught and blocked 57 other suspected North Korean hacking attempts this year alone.周六，美国联邦调查局表示，对币安的攻击由朝鲜黑客组织TraderTraitor实施。朝鲜否认指控。币安称，仅今年就拦截了另外57起疑似朝鲜黑客攻击。The attack also stood out for its patience. The hackers began probing Binance’s wallet team in June, when an engineer downloaded a tampered version of a popular software tool, the company said. The fake job interview that followed was elaborate: one phony interviewer shared a social media account filled with personal photos and videos to seem more convincing, a tactic Binance called more advanced and deceptive than any the company had experienced.此次攻击表现出的耐心也引人注目。币安称，黑客6月开始试探币安钱包团队，当时一名工程师下载了一款流行软件工具的篡改版本。随后的虚假面试设计周密：一名假面试官分享了一个满是个人照片和视频的社交媒体账户，以增加可信度。币安称，这一手法比该公司此前遭遇的任何手法都更先进、更具欺骗性。The hackers behind the Binance attack moved the stolen cryptocurrency through about 12,000 wallets in order to cover their tracks and get around efforts to freeze the funds, according to a report by Elliptic, a crypto analytics firm.据加密货币分析公司Elliptic的报告，币安案背后的黑客通过约12000个钱包转移窃取的加密货币，以掩盖踪迹，避开资金冻结手段。Binance said on Tuesday that halting withdrawals was not enough to stop the attack because the hackers had exploited a feature that let them keep moving funds independently of the company’s systems. Using Binance’s hijacked system, the hackers were able to partly take control of one of the exchange’s accounts on Ethereum, one of the most widely used crypto networks. That access was recorded on the network itself, not inside Binance’s systems, allowing the hackers to keep stealing money.币安周二表示，仅停止提款不足以阻止攻击，因为黑客利用了一项功能，使其能脱离币安系统继续转移资金。利用被劫持的币安系统，黑客部分控制了币安在以太坊上的一个账户——以太坊是使用最广泛的加密货币网络之一。该访问权限记录在以太坊网络本身，而非币安系统内部，黑客因此得以继续窃取资金。The account used a security setup that spreads control across multiple systems, so there was no simple way to quickly revoke the hackers’ access, Binance said. Engineers instead had to devise a workaround to stop the theft.币安称，该账户的安全设置将控制权分散在多个系统中，难以在短时间内轻易撤销黑客访问权限。工程师不得不设计变通方案来阻止盗窃。About $2.85 billion has been frozen or intercepted, the company said. Binance said that it would cover customers’ losses and that it had already replenished 98 percent of the affected tokens.币安表示，约28.5亿美元已被冻结或拦截；公司将弥补客户损失，并已补充98%的受影响代币。Binance said it had rebuilt the hacked systems, replaced compromised computers and would bring in outside security firms to review the attack. It also said it was working to set up a security research fund and was teaming up with A.I. companies to better protect crypto systems.币安称已重建遭攻击系统，更换受损电脑，并将引入外部安全公司审查此次攻击。币安还表示，正在设立安全研究基金，并与人工智能公司合作，以更好地保护加密货币系统。Aaron Krolik对本文有报道贡献。Emmy Martin自旧金山报道科技业新闻。她也是2026-27时报奖学金项目成员。翻译：经雷点击查看本文英文版。