由於存在關鍵私密金鑰漏洞,美國當局扣押了 $150 億美元的比特幣

On October 14, 2025, the U.S. Department of Justice executed the largest cryptocurrency seizure in history, confiscating approximately 127,000 Bitcoin valued at over $15 billion, according to court documents unsealed at the Brooklyn Federal Court. The unprecedented seizure revealed a critical security flaw: law enforcement gained access not through system breaches or hacking, but by discovering that the private keys were generated using non-random, predictable algorithms. This massive security breach traces back to Lubian mining pool, which operated as a laundering mechanism for a Cambodian pig-butchering scam operation. The criminal organization used the mining pool to convert illicit proceeds into newly minted “clean” Bitcoin. At its peak in 2020, Lubian controlled nearly 6% of Bitcoin’s total hash rate. In December 2020, approximately 127,426 Bitcoin were reportedly stolen from Lubian, though neither the pool nor any hackers officially acknowledged the incident. The case remained unresolved until July 2024, when the Bitcoin was consolidated and moved just before international law enforcement operations commenced. U.S. authorities determined the funds represented laundered criminal proceeds rather than stolen assets. Security analysis indicates Lubian used flawed pseudorandom algorithms for private key generation, creating predictable keys that could be reconstructed without brute-force attacks. This incident highlights the critical importance of cryptographic randomness in blockchain security. Private keys require true randomness from 2^256 possible combinations to ensure security. When randomness is compromised, the search space for potential keys becomes dramatically smaller, enabling reconstruction. Historical precedents include the 2015 Blockchain Bandit incident, where hackers exploited weak random number generators to steal over 50,000 ETH. Research by Milk Sad revealed that weak random wallets once held over 53,500 BTC collectively. Security experts recommend using time-tested, open-source, audited non-custodial wallets with cryptographically secure random number generation. Hardware wallets provide additional protection through physical true random number generators in secure chips. Users should never store seed phrases digitally and must maintain physical backups in secure locations. This case underscores that while Bitcoin’s underlying protocol remains secure, implementation flaws in wallet and key management systems can create catastrophic vulnerabilities. The cryptocurrency industry must prioritize cryptographic best practices and robust security implementations to protect digital assets.

立即分享:

相關文章