{
  "version": 1,
  "event_id": "evt_0765a8f5c1a4b9f7",
  "url": "https://xiyu.news/events/evt_0765a8f5c1a4b9f7/",
  "json": "https://xiyu.news/api/events/evt_0765a8f5c1a4b9f7.json",
  "type": "security_incident",
  "status": "monitoring",
  "category": "crypto",
  "title": {
    "zh": "Hacken报告：两把密钥泄露或危及910亿美元USDT",
    "en": "A two-key breach could hand control of $91 billion in USDT to hackers, report finds"
  },
  "current_state": {
    "zh": "安全公司Hacken发布技术审查发现，Tron上约913亿美元的USDT（约占流通总量的一半）仅由两个签名密钥保护。攻击者一旦突破这两个密钥，就能铸造无限量USDT，甚至夺取合约所有权，使Tether失去管理控制权。\n\n这凸显了稳定币基础设施的系统性风险：一旦被利用，攻击者可能无限铸造USDT，威胁稳定币的锚定以及用户和交易所的信任。同时，在以太坊、Avalanche和Celo上复用签名密钥，也可能扩大管理权限方面的脆弱性。\n\nHacken未发现密钥实际被入侵或发生安全事件的证据，但警告称复用签名密钥可能扩大跨链管理风险。该审查发布之际，KPMG审计帮助Tether获得Bluechip评级上调；两密钥攻击还可能让攻击者转移USDT合约所有权，使Tether无法冻结资金。",
    "en": "A Hacken report reveals that a two-key breach could compromise control of $91 billion in USDT, highlighting major key security gaps in Tether's infrastructure."
  },
  "first_seen_at": "2026-09-07T17:49:56.694392+00:00",
  "last_updated_at": "2026-09-07T17:49:56.694392+00:00",
  "last_material_change_at": "2026-09-07T17:49:56.694392+00:00",
  "confidence": 0.75,
  "updates_count": 1,
  "sources_count": 1,
  "entities": [
    "usdt"
  ],
  "identifiers": [],
  "topics": [
    "key-management",
    "tether"
  ],
  "updates": [
    {
      "update_id": "upd_d014e9dcdab1c60f",
      "event_id": "evt_0765a8f5c1a4b9f7",
      "occurred_at": "2026-09-07T10:35:23Z",
      "published_at": "2026-09-07T10:35:23Z",
      "first_seen_at": "2026-09-07T17:49:56.694392Z",
      "time_precision": "published",
      "update_type": "initial",
      "material_change": true,
      "title_zh": "Hacken报告：两把密钥泄露或危及910亿美元USDT",
      "title_en": "A two-key breach could hand control of $91 billion in USDT to hackers, report finds",
      "what_changed_zh": "安全公司Hacken发布技术审查发现，Tron上约913亿美元的USDT（约占流通总量的一半）仅由两个签名密钥保护。攻击者一旦突破这两个密钥，就能铸造无限量USDT，甚至夺取合约所有权，使Tether失去管理控制权。\n\n这凸显了稳定币基础设施的系统性风险：一旦被利用，攻击者可能无限铸造USDT，威胁稳定币的锚定以及用户和交易所的信任。同时，在以太坊、Avalanche和Celo上复用签名密钥，也可能扩大管理权限方面的脆弱性。\n\nHacken未发现密钥实际被入侵或发生安全事件的证据，但警告称复用签名密钥可能扩大跨链管理风险。该审查发布之际，KPMG审计帮助Tether获得Bluechip评级上调；两密钥攻击还可能让攻击者转移USDT合约所有权，使Tether无法冻结资金。",
      "what_changed_en": "A Hacken report reveals that a two-key breach could compromise control of $91 billion in USDT, highlighting major key security gaps in Tether's infrastructure.",
      "current_state_zh": "安全公司Hacken发布技术审查发现，Tron上约913亿美元的USDT（约占流通总量的一半）仅由两个签名密钥保护。攻击者一旦突破这两个密钥，就能铸造无限量USDT，甚至夺取合约所有权，使Tether失去管理控制权。\n\n这凸显了稳定币基础设施的系统性风险：一旦被利用，攻击者可能无限铸造USDT，威胁稳定币的锚定以及用户和交易所的信任。同时，在以太坊、Avalanche和Celo上复用签名密钥，也可能扩大管理权限方面的脆弱性。\n\nHacken未发现密钥实际被入侵或发生安全事件的证据，但警告称复用签名密钥可能扩大跨链管理风险。该审查发布之际，KPMG审计帮助Tether获得Bluechip评级上调；两密钥攻击还可能让攻击者转移USDT合约所有权，使Tether无法冻结资金。",
      "current_state_en": "A Hacken report reveals that a two-key breach could compromise control of $91 billion in USDT, highlighting major key security gaps in Tether's infrastructure.",
      "detailed_summary_zh": "A Hacken report reveals that a two-key breach could compromise control of $91 billion in USDT, highlighting major key security gaps in Tether's infrastructure.",
      "detailed_summary_en": "A Hacken report reveals that a two-key breach could compromise control of $91 billion in USDT, highlighting major key security gaps in Tether's infrastructure.",
      "background_zh": "USDT是一种稳定币，其交易需要密码学密钥在区块链上签名和验证，因此密钥管理协议对其安全至关重要。Tron承载着流通中USDT的最大份额，因此那里的密钥风险具有不成比例的巨大影响。所谓“两密钥入侵”，是指攻击者获得两个签名密钥的控制权，这两个密钥共同授权铸造或冻结资金等关键管理功能。",
      "background_en": "USDT is a stablecoin whose transactions require cryptographic keys to sign and verify activity on the blockchain, making key management protocols critical to its security. Tron hosts the largest share of circulating USDT, so key risks there carry outsized consequences. In this context, a two-key breach means an attacker gaining control over two signing keys that jointly authorize critical administrative functions such as minting or freezing funds.",
      "community_discussion_zh": "",
      "community_discussion_en": "",
      "market_impact_zh": "该报告引发了对Tether密钥托管的担忧，可能加强监管和交易对手方的审视，但尚未发生实际攻击，因此实际市场影响仍不确定。风险敞口将体现在稳定币供应信心、发行方信任以及高度依赖USDT的交易平台的流动性上；若真实发生入侵，可能影响USDT的锚定和整体加密市场情绪。",
      "market_impact_en": "The report raises concerns about Tether's key custody and could heighten regulatory or counterparty scrutiny, but no exploit has occurred, so actual market effects remain uncertain. Exposures would run through stablecoin supply confidence, issuer trust, and the liquidity of trading venues that rely heavily on USDT; a real breach could affect USDT's peg and broader crypto market sentiment.",
      "importance_score": 8.5,
      "references": [
        {
          "url": "https://www.coindesk.com/tech/2026/09/04/tether-receives-bluechip-rating-upgrade-but-hacken-finds-major-key-security-gaps",
          "title": "Half of all USDT sits behind two signing keys, security review finds"
        },
        {
          "url": "https://cryptobriefing.com/tether-breach-risk-usdt-hackers/",
          "title": "Tether faces breach risk that could expose $91B in USDT to hackers"
        }
      ],
      "confidence": 0.75,
      "story_ids": [
        "rss:www.coindesk.com_arc_outboundfeeds_rss_:c7ac573a20f26251"
      ],
      "sources": [
        {
          "url": "https://www.coindesk.com/tech/2026/09/04/tether-receives-bluechip-rating-upgrade-but-hacken-finds-major-key-security-gaps",
          "label": "CoinDesk",
          "source_type": "rss",
          "official": false
        }
      ]
    }
  ]
}