安全需要整个行业共同去守护,而不是某一家交易所自己的事情。
今天在群里有小伙伴在说,资金放支付宝安全,因为出现盗刷等问题时,有相应的赔付机制。
其实加密行业也一样。大家真正关心的不只是交易所会不会发生安全事故,更重要的是,资金被盗之后,平台有没有能力承担损失、妥善解决用户赔付。
Star
@star_okx这个推文,是站在整个行业的角度,呼吁交易所共同建立更完善的安全标准和协同机制。
他提到,交易所不能只关注私钥保护,还应该加强钱包管理和权限控制,把安全限制下沉到加密签名层。即使管理系统被攻破,也不能轻易绕过底层安全限制。
此外,交易所、稳定币发行方也应该建立实时安全预警、可疑资金追踪和协同响应机制,尽可能减少安全事故带来的损失。
经历 FTX 暴雷之后,储备金证明逐渐成为头部交易所重建用户信任的重要方式。OKX、Binance、Bybit、Bitget 等平台都开始定期公布储备金报告,让用户能够通过相关数据验证平台的资产储备是否覆盖用户余额。
当然,储备金证明不等于专门的赔付基金,但平台的资产储备、风险保障机制和应急处理能力,都是用户评估交易所安全性的重要依据。
安全防护是第一道防线,承担风险的能力是另一道防线。
交易所之间可以竞争市场份额,但在保护用户资产这件事上,整个行业应该站在一起。
@okx @okxchinese
The recent security incidents involving Bybit, Bitget, and now Binance should serve as a wake-up call for every leader in the crypto industry.
Security should never be an area of commercial competition. It is a shared responsibility to protect our customers and the entire industry.
Over the past decade, major crypto exchanges have made significant progress in protecting private keys. We have seen relatively few incidents involving direct private key compromises in recent years. So far, we have not seen conclusive evidence that Binance’s hot wallet private key was leaked. The greater concern may lie in vulnerabilities in access controls and wallet management systems.
Companies that have never experienced a major security incident should not assume they are inherently safer or immune to attacks.
At OKX, we have built multiple layers of sophisticated security protection and maintained a strong security track record over the past decade. But we also recognize that no system is absolutely secure. We must remain humble, vigilant, and constantly challenge our own security assumptions.
A major security breach at any exchange undermines trust in the entire crypto industry, ultimately hurting every company and every customer.
I believe CEOs across the industry need to come together, just as we did during the Bitcoin fork crisis in 2017, to establish stronger industry-wide security standards and coordinated response mechanisms.
For example, transfers and settlements between verified exchanges could be processed in real time, while large withdrawals to unknown or unverified addresses, as well as transactions granting smart contract permissions, should be subject to additional verification and appropriate security delays.
Crucially, these safeguards should be enforced at the cryptographic signing layer, rather than relying solely on application-level controls. Even if an attacker compromises an exchange’s wallet management system, they should not be able to bypass these fundamental security restrictions.
We should also establish industry-wide mechanisms for real-time security incident notifications, coordinated monitoring of suspicious funds, and rapid responses to potential attacks. Exchanges, stablecoin issuers, and other major industry participants should work together to enable the rapid, lawful temporary freezing of suspected stolen assets when necessary.
We should also work together to accelerate the industry’s transition to quantum-resistant cryptography and strengthen our defenses against emerging AI-powered security threats. These are long-term challenges that no single company can solve alone, and they require coordinated research, shared standards, and collective action across the industry.
Security is everyone’s responsibility. No company can protect the future of crypto alone.
顯示更多