加密世界的隐秘敌人，黑客安全事件正在偷走行业信心。

原文作者： 1912212.eth，Foresight News加密行业一直以来以各类财富故事而闻名，然后隐藏在这之下的危机已开始浮现。近期，bybit 冷钱包被盗 14.6 亿美元，成为加密历史上最大的单一黑客事件，虽然事后并未造成严重负面影响，但给行业安全敲响了一记警钟。想象一下，当你历经千辛万苦赚得的财富，却被技术高超的黑客动动手指敲敲键盘，便被轻易偷走……安全问题大于天，守住财富的重要性不言而喻。黑客攻击已不仅仅是技术问题，而是动摇整个加密行业根基的最大风险之一。截止 2025 年 2 月，一季度加密领域已知损失就超 15 亿美元，黑客事件就高达 20 起，攻击频率之高，损失之巨大令人咂舌。作为对比，immunefi 的数据说明了一切。2024 年年初至当年 8 月，整个行业共发生 154 起黑客攻击和窃取行为，造成的损失共计 12.1 亿美元，而 2025 年仅仅才 2 个月，损失金额就几乎已超越同期记录。<h2>过往黑客事件触目惊心</h2>过往加密历史上，部分协议或者交易所都曾因黑客事件面临巨大挑战，甚至一蹶不振分崩离析。<img src="https://static.fwimg.io/img/feed/1ea599d329c4f1cabc22f440c570052b.jpg">2021 年 8 月，Poly Network 跨链协议被盗，损失 6.11 亿美元（多链资产），黑客利用智能合约漏洞从 Poly Network 的以太坊、BNB 链和 Polygon 钱包窃取资产。奇特的是，黑客宣称“只是为了好玩”，最终归还大部分资金（约 3 亿未追回）。事件揭示了 DeFi 协议的复杂性与潜在风险。2022 年 2 月，Wormhole 跨链桥被盗，损失 12 万枚 wETH，黑客利用 Solana VAA 验证漏洞伪造消息，凭空铸造 wrapped ETH。资金未被追回，事件动摇了跨链协议的信任度。2022 年 3 月，Ronin 网络跨链桥被盗，损失 173, 600 枚 ETH 与 2550 万枚 USDC，价值 6.2 亿美元。黑客通过 51% 攻击控制 Ronin 网络 9 个验证者中的 5 个，窃取 Axie Infinity 游戏的跨链桥资金。FBI 确认背后是 Lazarus 集团。事件暴露了跨链桥的脆弱性，Sky Mavis 耗时数年筹资赔偿用户，凸显修复成本之高。2022 年 10 月，币安跨链桥被盗，损失 200 万枚 BNB，黑客利用 BSC Token Hub 智能合约漏洞伪造提款证明，凭空生成 BNB。币安迅速冻结大部分资产，但仍损失惨重。此案促使行业重新审视跨链桥的安全设计。以上仅仅为过去数年中较为严重，损失较大的黑客安全事件，其他损失数百万上千万的不可胜数。最近数月，加密行业就出现了比较严重的几次黑客安全事件。2025 年 2 月，稳定币数字银行 Infini 损失 4950 万美元，Infini 遭攻击是由于黑客秘密保留了管理权限。2025 年 2 月，bybit 被盗走原生 ETH 以及各类衍生品 ETH 总计超 51 万枚，损失超 14 亿美元，黑客通过 UI 伪造、社会工程学和 delegatecall 漏洞攻破多签成员设备，篡改冷钱包智能合约，转移巨额资金。疑似朝鲜 Lazarus 集团所为。2024 年 11 月，Thala Labs DeFi 平台被盗 2550 万美元被盗，后续通过白帽黑客和社区协作全额追回。事件凸显 DeFi 协议在紧急响应中的潜力，也暴露了私钥管理的脆弱性。2024 年 11 月，链上交易平台 Dexx 被盗，损失金额达到 2100 万枚 USDT（超 1.5 亿美元），攻击涉及 1000 多个用户和 8000 多个地址，疑似因平台私钥明文存储及传输导致泄露，且内部作案嫌疑未排除。创始人承诺赔偿，受害者在多地立案，但攻击者资产尚未完全转移。<h2>为何黑客如此猖獗</h2>黑客在加密行业之所以如此猖獗，主要源于技术、人性、经济和监管等多重因素的交织。从技术上看，区块链交易的不可逆性使得资金一旦被盗便难以追回，而智能合约的复杂性又埋藏着漏洞隐患，如 Bybit 事件中的 delegatecall 问题，给了黑客可乘之机。此外，人性弱点也是重要原因，社会工程学攻击屡屡得手，比如多签成员被钓鱼或员工安全意识不足，导致防护体系形同虚设。经济层面，加密资产的高流动性与匿名性为黑客提供了洗钱便利，巨额回报更吸引了专业团伙如 Lazarus 集团的参与，低风险高收益的特性让攻击成本与收益严重失衡。最后，监管的缺位进一步放大了问题，去中心化的特性虽然赋予了行业自由，却也缺乏统一的安全标准和执法机制，使得黑客活动难以受到有效遏制。这些因素共同作用，让加密行业成为黑客的乐园，不仅挑战技术安全，更威胁用户信任与生态发展，亟需全行业正视并应对。<h2>黑客如何威胁行业根基</h2>黑客对加密行业的威胁已深入行业根基，动摇其信任、市场稳定和发展前景。首先，他们直接侵蚀用户信任，大规模盗窃不仅让散户恐慌性撤资，也使机构投资者对加密安全性产生怀疑，这种信任危机可能引发“挤兑效应”，导致平台流动性枯竭甚至倒闭。其次，黑客攻击引发市场剧烈波动，例如币安跨链桥被盗 5.7 亿美元后，BNB 价格短时暴跌，恐慌性抛售波及整个生态，DeFi 和交易所的连锁反应放大损失，进一步削弱市场信心。此外，行业发展也因此受阻，巨额盗窃案让潜在投资者望而却步，机构资金流入放缓，而开发者可能因安全压力减少创新尝试，如跨链桥和智能合约项目在 Ronin 和 Wormhole 事件后面临更严格审查。更深层的是，黑客暴露了行业的技术与治理短板，区块链不可逆性和去中心化虽是优势，却在安全面前成为双刃剑，若不解决这些根源问题，加密行业的长期信誉和主流采用都将受限。黑客不仅是资金掠夺者，更是行业生态的破坏者，其威胁已超越单一事件，成为系统性风险。<h2>如何反击？</h2>面对黑客的严峻威胁，加密行业可以通过技术升级、教育强化、协作机制和保险体系多管齐下进行反击。首先，技术层面是核心防线，行业需加强智能合约的代码审计，推广形式化验证工具，确保漏洞在上线前被修复，同时改进多签机制和冷钱包设计，减少单点故障。其次，提升教育力度至关重要，用户和从业者需接受系统性安全培训，识别社会工程学骗局，降低钓鱼攻击成功率，平台也应普及私钥管理的最佳实践。此外行业协作能显著提升反击效率，建立实时的威胁情报共享网络，让交易所、DeFi 项目和安全公司联合追踪黑客资金流，如 Thala Labs 追回 2550 万美元的案例证明了社区协作的潜力；适度引入监管也能推动平台落实安全责任，形成威慑力。最后，推广加密资产保险机制可为用户提供缓冲，减轻损失冲击，像 KuCoin 事件中保险弥补部分资金的做法值得借鉴。这些措施若能协同推进，不仅能遏制黑客猖獗势头，还可化危机为契机，推动行业技术成熟和信任重建，让加密生态在挑战中稳步前行。

黑客阴影笼罩：加密行业的隐秘危机与应对之道

The secret enemies of the encrypted world, cybersecurity incidents are stealing the industry's confidence.

Author: 1912212.eth, Foresight NewsThe cryptocurrency industry has long been known for its wealth stories, but the crisis hidden beneath them has begun to surface. Recently, Bybit's cold wallet was hacked for $1.46 billion, the largest single hacking incident in cryptocurrency history. Although it did not have a severe negative impact afterwards, it sounded an alarm for the industry's security. Imagine, the wealth you have earned through great effort can be easily stolen by a skilled hacker with just a few keystrokes...Security is of paramount importance, and the importance of safeguarding one's wealth cannot be overstated. Hacker attacks are not just a technical issue, but one of the biggest risks that can undermine the very foundation of the cryptocurrency industry.As of February 2025, the known losses in the cryptocurrency sector in the first quarter have already exceeded $1.5 billion, with 20 hacking incidents, the frequency and magnitude of which are staggering. In contrast, Immunefi's data shows that in the period from the beginning of 2024 to August of that year, the entire industry experienced 154 hacking and theft incidents, resulting in a total loss of $1.21 billion, while in the first 2 months of 2025, the loss amount has already nearly surpassed the same period record.<h2>Shocking Past Hacking Incidents</h2>In the history of cryptocurrency, some protocols or exchanges have faced huge challenges and even disintegration due to hacking incidents.<img src="https://static.fwimg.io/img/feed/1ea599d329c4f1cabc22f440c570052b.jpg">In August 2021, the Poly Network cross-chain protocol was hacked, with a loss of $611 million (multi-chain assets). The hacker exploited a vulnerability in the smart contract to steal assets from the Ethereum, BNB Chain and Polygon wallets of Poly Network. Interestingly, the hacker claimed to have done it "just for fun" and eventually returned most of the funds (about $300 million unrecovered). The incident revealed the complexity and potential risks of DeFi protocols.In February 2022, the Wormhole cross-chain bridge was hacked, with a loss of 120,000 wETH. The hacker exploited a vulnerability in the Solana VAA verification to forge messages and mint wrapped ETH out of thin air. The funds were not recovered, shaking the trust in cross-chain protocols.In March 2022, the Ronin Network cross-chain bridge was hacked, with a loss of 173,600 ETH and 25.5 million USDC, worth $620 million. The hacker gained control of 5 out of 9 Ronin network validators through a 51% attack and stole the cross-chain bridge funds of the Axie Infinity game. The FBI confirmed that the Lazarus group was behind it. The incident exposed the fragility of cross-chain bridges, and Sky Mavis spent years raising funds to compensate users, highlighting the high cost of remediation.In October 2022, the Binance cross-chain bridge was hacked, with a loss of 2 million BNB. The hacker exploited a vulnerability in the BSC Token Hub smart contract to forge withdrawal proofs and generate BNB out of thin air. Binance quickly froze most of the assets, but still suffered heavy losses. This case prompted the industry to re-examine the security design of cross-chain bridges.The above are just the most severe and largest hacking security incidents in the past few years, and there are countless others with losses in the hundreds of millions or billions.In the past few months, the cryptocurrency industry has experienced several serious hacking security incidents.In February 2025, the stablecoin digital bank Infini lost $49.5 million, as Infini was attacked due to the hacker secretly retaining administrative privileges.In February 2025, Bybit was hacked for over 510,000 native ETH and various derivative ETH, with a loss of over $1.4 billion. The hacker breached the multi-signature members' devices through UI forgery, social engineering, and a delegatecall vulnerability, and manipulated the cold wallet smart contract to transfer the massive funds. Suspected to be the work of the North Korean Lazarus group.In November 2024, the Thala Labs DeFi platform was hacked for $25.5 million, which was later fully recovered through the collaboration of white hat hackers and the community. The incident highlighted the potential of DeFi protocols in emergency response, but also exposed the fragility of private key management.In November 2024, the on-chain trading platform Dexx was hacked, with a loss of 21 million USDT (over $150 million). The attack involved more than 1,000 users and 8,000 addresses, suspected to be due to the platform's private keys being stored and transmitted in plain text, and the possibility of internal involvement cannot be ruled out. The founder promised compensation, and victims filed lawsuits in multiple locations, but the attacker's assets have not been fully transferred.<h2>Why are Hackers so Rampant?</h2>The rampant hacking in the cryptocurrency industry is mainly due to the interweaving of technical, human, economic, and regulatory factors. Technically, the irreversibility of blockchain transactions makes it difficult to recover funds once stolen, and the complexity of smart contracts harbors vulnerabilities, such as the delegatecall issue in the Bybit incident, which gave hackers an opportunity. In addition, human weaknesses are also an important reason, as social engineering attacks have repeatedly succeeded, such as phishing of multi-signature members or insufficient security awareness of employees, rendering the protection system ineffective.Economically, the high liquidity and anonymity of cryptocurrency assets provide hackers with money laundering convenience, and the huge returns also attract the participation of professional groups like the Lazarus group. The low-risk, high-return nature of the attacks has led to a severe imbalance between attack costs and benefits. Finally, the lack of regulation has further exacerbated the problem. The decentralized nature of the industry provides freedom, but also lacks unified security standards and law enforcement mechanisms, making it difficult to effectively curb hacker activities. These factors have collectively turned the cryptocurrency industry into a playground for hackers, not only challenging technical security, but also threatening user trust and ecosystem development, which the entire industry urgently needs to address.<h2>How do Hackers Threaten the Industry's Foundation?</h2>Hackers' threats to the cryptocurrency industry have penetrated to the very foundation of the industry, shaking its trust, market stability, and development prospects. First, they directly erode user trust. Large-scale theft not only causes retail investors to panic and withdraw, but also makes institutional investors doubt the security of cryptocurrencies, and this trust crisis may trigger a "bank run effect", leading to platform liquidity depletion and even collapse. Secondly, hacker attacks trigger violent market fluctuations. For example, after the $570 million hack of the Binance cross-chain bridge, the BNB price plummeted in the short term, and the panic selling rippled through the entire ecosystem, amplifying the losses of DeFi and exchanges through a chain reaction, further undermining market confidence.Furthermore, industry development is also impeded. Massive theft cases make potential investors hesitant, slowing the inflow of institutional capital, while developers may reduce innovation attempts due to security pressures, such as cross-chain bridges and smart contract projects facing stricter scrutiny after the Ronin and Wormhole incidents.At a deeper level, hackers have exposed the industry's technical and governance shortcomings. The irreversibility of blockchains and decentralization, while advantages, become double-edged swords in the face of security. If these root problems are not solved, the long-term reputation and mainstream adoption of the cryptocurrency industry will be limited. Hackers are not only plunderers of funds, but also destroyers of the industry ecosystem, and their threats have gone beyond individual incidents to become systemic risks.<h2>How to Fight Back?</h2>Facing the severe threat of hackers, the cryptocurrency industry can fight back through a multi-pronged approach of technical upgrades, education reinforcement, collaborative mechanisms, and insurance systems. First, the technical layer is the core defense line. The industry needs to strengthen smart contract code audits, promote formal verification tools to ensure vulnerabilities are fixed before launch, and improve multi-signature mechanisms and cold wallet designs to reduce single points of failure. Secondly, enhancing education is crucial. Users and practitioners need to receive systematic security training to identify social engineering scams and reduce the success rate of phishing attacks, while platforms should also popularize best practices for private key management.In addition, industry collaboration can significantly improve the efficiency of counterattacks. Establishing a real-time threat intelligence sharing network, where exchanges, DeFi projects, and security companies work together to track hacker fund flows, as demonstrated by the Thala Labs case in recovering $25.5 million, has proven the potential of community collaboration. Moderate regulatory involvement can also drive platforms to implement security responsibilities and form a deterrent force.Finally, the promotion of the cryptocurrency asset insurance mechanism can provide users with a buffer, mitigating the impact of losses, and the practice of KuCoin's insurance to compensate for part of the funds is worth learning from. If these measures can be promoted in coordination, they can not only curb the rampant momentum of hackers, but also turn crises into opportunities, promote the maturity of industry technology and rebuild trust, allowing the cryptocurrency ecosystem to steadily move forward amid challenges.

The shadow of hackers looms: the hidden crisis of the crypto industry and how to deal with it

Here is the English translation:

I have suffered the losses, you don't have to suffer them again.
Author: Ye Su
After Bybit was hacked and lost $150 million, the reputable infini was also attacked by hackers.
I also suffered significant losses due to hacking a few years ago. The company is conducting internal security training this morning, sharing some personal lessons and prevention guidelines:
The emerging modus operandi in recent years
1. Impersonation of acquaintances (Social Engineering)
Hackers often obtain your private key or seed phrase by pretending to be customer service, celebrities, friends, or investment opportunities. Stay vigilant and do not click on unfamiliar links.
This is the most difficult to prevent...

Don’t wait until you get hacked: A guide to Web3 security

Author: Sam Bourgi, CoinTelegraph; Compiled by Bai Shui, <Jinse Finance>
On February 21, the cryptocurrency exchange <Bybit> was hacked for over $150 million, making it the largest single hack in the industry's 15-year history. According to Cyvers, the attack accounts for over 60% of all cryptocurrency funds stolen in 2024 by value.
Hacks and scams have become commonplace in the cryptocurrency space, bringing...

JPMorgan: 비트코인의 '디지털 골드' 이야기가 압박을 받고 있다

Download app to participate in rewarding events