<p>上周，<strong>Coinbase</strong>(COIN -1.07%) 通知客户发生了一起安全漏洞，犯罪分子访问了大约 1% 的每月交易用户的个人数据。这家受欢迎的加密货币交易所估计，此次黑客攻击可能使其损失在 1.8 亿到 4 亿美元之间，具体情况见其 5 月 14 日的 SEC 文件。</p>
<p>黑客贿赂了 Coinbase 在国外的员工，以便他们能够访问其内部系统上的用户信息。随后，他们向 Coinbase 索要 2000 万美元的赎金，但该公司拒绝支付。相反，它将这笔钱作为奖励，提供给那些提供帮助抓捕罪犯的信息。</p>
<p><img src="https://imageproxy.pbkrs.com/https://g.foolcdn.com/image//query-b3A9cmVzaXplJnVybD1odHRwczovL2cuZm9vbGNkbi5jb20vZWRpdG9yaWFsL2ltYWdlcy84MTg4MTIvZ2V0dHlpbWFnZXMtMTM3MDIzMzMyMC5qcGcmdz03MDA?x-oss-process=image/auto-orient,1/interlace,1/resize,w_1440,h_1440/quality,q_95/format,jpg" alt="" original-src="https://imageproxy.pbkrs.com/https://g.foolcdn.com/image//query-b3A9cmVzaXplJnVybD1odHRwczovL2cuZm9vbGNkbi5jb20vZWRpdG9yaWFsL2ltYWdlcy84MTg4MTIvZ2V0dHlpbWFnZXMtMTM3MDIzMzMyMC5qcGcmdz03MDA"/></p>
<p>图片来源：Getty Images。</p>
<h2>Coinbase 承诺赔偿用户损失</h2>
<p>Coinbase 表示已通过电子邮件通知所有受影响的用户，并承诺赔偿任何损失。虽然犯罪分子没有访问敏感数据，如密码、双重身份验证或加密货币密钥，但他们确实获取了大量个人数据。这包括姓名和地址，以及掩码的社会安全号码和银行账户详细信息。</p>
<p>这使得黑客拥有足够的信息进行针对性的社会工程攻击。这些攻击可能是复杂的骗局，犯罪分子利用你的信息欺骗你提供安全代码、登录假网站或转账。例如，他们可能假装是 Coinbase 的代表，告诉客户将加密货币转移到所谓的 “安全” 账户中。</p>
<p>根据 The Block 的数据，Coinbase 每月大约有 970 万名交易用户。这意味着黑客可能访问了大约 97,000 名用户的数据。</p>
<h2>赔偿损失只是部分内容</h2>
<p>Coinbase 表示将覆盖因此次黑客攻击而导致的任何客户损失。它承诺将引入更严格的反欺诈保护，增强安全控制，并在美国开设支持中心。它还解雇了事件中涉及的员工。然而，这次攻击引发了人们对加密货币交易所资金安全的质疑。</p>
<p>事实上，银行也可能遭到黑客攻击。去年，<strong>Santander</strong> 在西班牙就发生过这样的事件。网络攻击是现代生活中不幸的一部分。尽管如此，银行通常具有更好的安全性和更多的消费者保护。Coinbase 选择让客户得到赔偿，但它并没有义务这样做。</p>
<p>相比之下，《电子资金转移法》（也称为 E 规）要求银行对欺诈交易进行赔偿。如果银行破产，FDIC 保险将保护客户资金。同样，大多数顶级经纪公司也会赔偿欺诈损失，如果经纪公司倒闭，SIPC 保护将生效。</p>
<p>在加密货币日益主流化的同时，美国政府也在考虑有关银行类机构应如何运作的立法，因此此次黑客事件的消息尤为相关。简单来说，目前加密货币交易所的资产风险高于银行和经纪账户中的资产。</p>
<h2>加密投资者如何保护自己</h2>
<p>数字资产是一种相对较新的资产类别，不幸的是，这使得投资者在保护其资产安全方面承担更大的责任。虽然你无法做太多事情来阻止加密货币的波动，但你可以采取措施来最小化其他安全风险。</p>
<ul>
<li><strong>警惕网络钓鱼和社会工程攻击：</strong> 尽量不要点击通过电子邮件或短信收到的链接，即使你认为你知道发件人。仔细检查网址和发件人信息，并寻找字母交换或拼写错误等明显迹象。</li>
<li><strong>监控银行对账单以防欺诈活动：</strong> 如果有可能黑客访问了你的某些数据，请检查银行对账单以寻找可疑交易。如果你认为有人可能能够以你的名义借款，检查你的信用报告并考虑进行信用冻结也是值得的。</li>
<li><strong>考虑使用非托管加密钱包：</strong> 如果你将资金留在加密货币交易所，该平台就拥有你的资产的保管权，如果被黑客攻击则面临风险。如果你担心将加密货币留在集中平台上，可以研究非托管钱包的优缺点。硬件钱包离线存储，使其更难被黑客攻击。请注意，加密钱包存在不同的风险，例如如果你忘记密码则缺乏帮助。</li>
<li><strong>购买加密 ETF：</strong> 交易所交易基金（ETF）允许投资者通过普通经纪账户将加密货币添加到其投资组合中。更好的是？基金保管人负责安全存储资产。SEC 已批准多种 <strong>比特币</strong> 和 <strong>以太坊</strong> 的现货 ETF，目前还有其他加密 ETF 的申请在审理中。</li>
</ul>
<h2>时刻关注安全</h2>
<p>知道犯罪分子可能已经访问了你的个人数据是令人不快的。加密投资者需要比其他类型的零售投资者更意识到风险。好消息是，有一些方法可以让黑客更难得手，包括设置自己的加密钱包或购买加密 ETF。</p>

COIN

<p>Coinbase 最近报告了一起安全漏洞，影响了大约 1% 的月度用户，可能使公司损失在 1.8 亿到 4 亿美元之间。黑客访问了个人数据并要求 2000 万美元的赎金，但 Coinbase 拒绝了。公司将对受影响的用户进行赔偿，并加强安全措施。此事件引发了人们对加密交易所资金安全的担忧，相较于拥有更多消费者保护的银行。建议投资者警惕网络钓鱼攻击，并考虑使用非托管钱包或加密 ETF 以增强安全性</p>

<p>Last week, <strong>Coinbase</strong>(COIN -1.07%) told customers about a security breach in which criminals accessed personal data from around 1% of its monthly transacting users. The popular cryptocurrency exchange estimates the hack could cost it between $180 million and $400 million, per its May 14 SEC filing.</p>
<div class="lb-trans"><p>上周，<strong>Coinbase</strong>(COIN -1.07%) 通知客户发生了一起安全漏洞，犯罪分子访问了大约 1% 的每月交易用户的个人数据。这家受欢迎的加密货币交易所估计，此次黑客攻击可能使其损失在 1.8 亿到 4 亿美元之间，具体情况见其 5 月 14 日的 SEC 文件。</p>
</div><p>The hackers bribed Coinbase employees abroad so they could access user information on its internal systems. They then demanded a $20 million ransom from Coinbase, which the company refused to pay. Instead, it offered the money as a reward for information that helped to catch the criminals.</p>
<div class="lb-trans"><p>黑客贿赂了 Coinbase 在国外的员工，以便他们能够访问其内部系统上的用户信息。随后，他们向 Coinbase 索要 2000 万美元的赎金，但该公司拒绝支付。相反，它将这笔钱作为奖励，提供给那些提供帮助抓捕罪犯的信息。</p>
</div><p><img src="https://imageproxy.pbkrs.com/https://g.foolcdn.com/image//query-b3A9cmVzaXplJnVybD1odHRwczovL2cuZm9vbGNkbi5jb20vZWRpdG9yaWFsL2ltYWdlcy84MTg4MTIvZ2V0dHlpbWFnZXMtMTM3MDIzMzMyMC5qcGcmdz03MDA" alt="" original-src="https://g.foolcdn.com/image/?url=https%3A%2F%2Fg.foolcdn.com%2Feditorial%2Fimages%2F818812%2Fgettyimages-1370233320.jpg&amp;op=resize&amp;w=700"/></p>
<p>Image source: Getty Images.</p>
<div class="lb-trans"><p>图片来源：Getty Images。</p>
</div><h2>Coinbase promises to cover user losses</h2>
<div class="lb-trans"><h2>Coinbase 承诺赔偿用户损失</h2>
</div><p>Coinbase says it informed all affected users by email and committed to reimbursing any losses. While the criminals didn't access sensitive data such as passwords, 2FA, or cryptocurrency keys, they did get their hands on significant amounts of personal data. That includes names and addresses, as well as masked Social Security numbers and bank account details.</p>
<div class="lb-trans"><p>Coinbase 表示已通过电子邮件通知所有受影响的用户，并承诺赔偿任何损失。虽然犯罪分子没有访问敏感数据，如密码、双重身份验证或加密货币密钥，但他们确实获取了大量个人数据。这包括姓名和地址，以及掩码的社会安全号码和银行账户详细信息。</p>
</div><p>This gives the hackers enough information to mount targeted social engineering attacks. These can be sophisticated schemes in which criminals use your information to trick you into giving up security codes, logging on to fake sites, or transferring money. For example, they might pose as Coinbase representatives and tell customers to move crypto into a so-called &#34;safe&#34; account.</p>
<div class="lb-trans"><p>这使得黑客拥有足够的信息进行针对性的社会工程攻击。这些攻击可能是复杂的骗局，犯罪分子利用你的信息欺骗你提供安全代码、登录假网站或转账。例如，他们可能假装是 Coinbase 的代表，告诉客户将加密货币转移到所谓的 “安全” 账户中。</p>
</div><p>According to The Block, Coinbase had around 9.7 million monthly transacting users. That means hackers could have accessed the data from around 97,000 users.</p>
<div class="lb-trans"><p>根据 The Block 的数据，Coinbase 每月大约有 970 万名交易用户。这意味着黑客可能访问了大约 97,000 名用户的数据。</p>
</div><h2>Repaying losses is only part of the picture</h2>
<div class="lb-trans"><h2>赔偿损失只是部分内容</h2>
</div><p>Coinbase says it will cover any customer losses that result from the hack. It promised to introduce stricter anti-fraud protections, strengthen its security controls, and open a support hub in the U.S. It also fired the employees involved in the incident. However, the attack raises questions about the safety of funds on crypto exchanges.</p>
<div class="lb-trans"><p>Coinbase 表示将覆盖因此次黑客攻击而导致的任何客户损失。它承诺将引入更严格的反欺诈保护，增强安全控制，并在美国开设支持中心。它还解雇了事件中涉及的员工。然而，这次攻击引发了人们对加密货币交易所资金安全的质疑。</p>
</div><p>Indeed, banks can also get hacked. It happened to <strong>Santander</strong> in Spain last year. Cyberattacks are an unfortunate part of modern living. Even so, banks generally have better security and more consumer protections. Coinbase is <em>choosing</em> to make clients whole, but it doesn't have to.</p>
<div class="lb-trans"><p>事实上，银行也可能遭到黑客攻击。去年，<strong>Santander</strong> 在西班牙就发生过这样的事件。网络攻击是现代生活中不幸的一部分。尽管如此，银行通常具有更好的安全性和更多的消费者保护。Coinbase 选择让客户得到赔偿，但它并没有义务这样做。</p>
</div><p>In contrast, the Electronic Funds Transfer Act (also known as Regulation E) requires banks to reimburse customers for fraudulent transactions. If a bank fails, FDIC insurance protects customer money. Similarly, most top brokerages will reimburse fraudulent losses, and SIPC protection kicks in if the brokerage collapses.</p>
<div class="lb-trans"><p>相比之下，《电子资金转移法》（也称为 E 规）要求银行对欺诈交易进行赔偿。如果银行破产，FDIC 保险将保护客户资金。同样，大多数顶级经纪公司也会赔偿欺诈损失，如果经纪公司倒闭，SIPC 保护将生效。</p>
</div><p>At a time when crypto is becoming more mainstream and the U.S. government is looking at legislation around how bank-like institutions should behave, news of this hack is particularly relevant. Simply put, assets on cryptocurrency exchanges are currently more at risk than those held in banks and brokerage accounts.</p>
<div class="lb-trans"><p>在加密货币日益主流化的同时，美国政府也在考虑有关银行类机构应如何运作的立法，因此此次黑客事件的消息尤为相关。简单来说，目前加密货币交易所的资产风险高于银行和经纪账户中的资产。</p>
</div><h2>How crypto investors can protect themselves</h2>
<div class="lb-trans"><h2>加密投资者如何保护自己</h2>
</div><p>Digital assets are a relatively new asset class, and, unfortunately, that puts a greater onus on investors to keep their assets secure. While you can't do much to stop crypto from being volatile, you can take steps to minimize other security risks.</p>
<div class="lb-trans"><p>数字资产是一种相对较新的资产类别，不幸的是，这使得投资者在保护其资产安全方面承担更大的责任。虽然你无法做太多事情来阻止加密货币的波动，但你可以采取措施来最小化其他安全风险。</p>
</div><ul>
<li><strong>Be alert for phishing and social engineering attacks:</strong> Try not to click on links you get via email or text message, even if you think you know the sender. Check the URLs and sender details carefully and look for telltale signs such as a swapped letter or misspelling.</li>
<li><strong>Monitor bank statements for fraudulent activity:</strong> If there's a chance that hackers have accessed some of your data, check your bank statements for suspicious transactions. It's also worth checking your credit report and considering a credit freeze if you think someone may be able to borrow money in your name.</li>
<li><strong>Consider a non-custodial crypto wallet:</strong> If you leave your money on a crypto exchange, that platform has custody of your assets, and they are at risk if it gets hacked. If you're worried about leaving your crypto on a centralized platform, investigate the pros and cons of non-custodial wallets. Hardware wallets are kept offline, which makes them harder to hack. Be aware that crypto wallets have different risks, such as a lack of assistance if you forget your password.</li>
<li><strong>Buy a crypto ETF:</strong> Exchange-traded funds (ETFs) allow investors to add crypto to their portfolios from an ordinary brokerage account. Even better? The fund custodian is responsible for storing the assets safely. The SEC has approved a number of spot ETFs for <strong>Bitcoin</strong> and <strong>Ethereum</strong>. There are several applications for other crypto ETFs in the pipeline.</li>
</ul>
<div class="lb-trans"><ul>
<li><strong>警惕网络钓鱼和社会工程攻击：</strong> 尽量不要点击通过电子邮件或短信收到的链接，即使你认为你知道发件人。仔细检查网址和发件人信息，并寻找字母交换或拼写错误等明显迹象。</li>
<li><strong>监控银行对账单以防欺诈活动：</strong> 如果有可能黑客访问了你的某些数据，请检查银行对账单以寻找可疑交易。如果你认为有人可能能够以你的名义借款，检查你的信用报告并考虑进行信用冻结也是值得的。</li>
<li><strong>考虑使用非托管加密钱包：</strong> 如果你将资金留在加密货币交易所，该平台就拥有你的资产的保管权，如果被黑客攻击则面临风险。如果你担心将加密货币留在集中平台上，可以研究非托管钱包的优缺点。硬件钱包离线存储，使其更难被黑客攻击。请注意，加密钱包存在不同的风险，例如如果你忘记密码则缺乏帮助。</li>
<li><strong>购买加密 ETF：</strong> 交易所交易基金（ETF）允许投资者通过普通经纪账户将加密货币添加到其投资组合中。更好的是？基金保管人负责安全存储资产。SEC 已批准多种 <strong>比特币</strong> 和 <strong>以太坊</strong> 的现货 ETF，目前还有其他加密 ETF 的申请在审理中。</li>
</ul>
</div><h2>Keep security front of mind</h2>
<div class="lb-trans"><h2>时刻关注安全</h2>
</div><p>The knowledge that criminals may have accessed your personal data is unpleasant. Crypto investors need to be more conscious of the risks than other types of retail investors. The good news is that there are ways to make life harder for hackers, including setting up your own crypto wallet or buying crypto ETFs.</p>
<div class="lb-trans"><p>知道犯罪分子可能已经访问了你的个人数据是令人不快的。加密投资者需要比其他类型的零售投资者更意识到风险。好消息是，有一些方法可以让黑客更难得手，包括设置自己的加密钱包或购买加密 ETF。</p>
</div>

What the $400 Million Coinbase Hack Means for Your Crypto

- Coinbase 报告安全漏洞，约 1% 的用户数据被黑客获取。
- 黑客要求 2000 万美元赎金，Coinbase 拒绝并承诺赔偿用户损失。
- 此事件引发对加密货币交易所安全性的担忧。

价值 4 亿美元的 Coinbase 被黑事件对您的加密货币意味着什么