网安公司员工盗窃虚拟货币,应该怎么判?

链捕手Published on 2024-07-23Last updated on 2024-07-23

作者:肖飒lawyer

 

近期,一则某网络安全公司员工盗窃虚拟货币获250余万元的新闻受到币圈关注,内部技术人员的犯罪行为令人感叹危机竟在身边。然而从法律的角度看,这一案件涉及了虚拟货币相关刑事案件的一个关键问题:虚拟货币是否具有财物属性

基本案情

据检察院指控,2023 年 2 月 9 日至 20 日,某网络安全公司的员工洪某、阳某、张某通过分析利用 Yapi 远程代码执行漏洞获取目标虚拟币网站权限,以内网横向渗透、植入木马等方式控制内网服务器,找到服务器源码后下载分析出被害人苏某 1 个虚拟钱包地址、私钥等,并构建虚假指令转移被害人虚拟钱包地址中的虚拟币。嗣后,三人将其兑换为其他虚拟货币后予以出售,共计获取违法所得人民币 250 余万元。其间,另一员工郑某根据洪某的指示,伪造 Dash 币签名和广播交易,转移被害人 3015.9 个 Dash 币。

公诉机关认定其行为已触犯《中华人民共和国刑法》第二百六十四条、第二十五条第一款,应以盗窃罪追究其共同犯罪的刑事责任。

法院认为,被告人以非法占有为目的,利用技术手段侵入他人计算机信息系统,秘密窃取他人虚拟币,数额特别巨大或有其他特别严重情节,其行为均已构成盗窃罪,公诉机关指控的罪名成立。考虑认罪认罚、自首、立功、坦白、从犯、退赔等情节和因素后,接受了辩护人缓刑的主张,判处洪某犯盗窃罪,判处有期徒刑三年,缓刑四年,并处罚金人民币五万元;郑某犯盗窃罪,判处有期徒刑三年,缓刑三年,并处罚金人民币五万元。

盗窃虚拟货币是否构成盗窃

    讨论这一问题的主要意义在于,盗窃罪的法定刑高于非法获取计算机信息系统数据罪,盗窃罪数额特别巨大或者有其他特别严重情节的,可以处十年以上有期徒刑或者无期徒刑,并处罚金或者没收财产;而非法获取计算机信息系统数据罪情节特别严重的,只处三年以上七年以下有期徒刑,并处罚金。盗窃虚拟货币的定罪难点和常见的辩护点都在虚拟货币的财物属性问题上,根据《刑法》第二百六十四条,盗窃罪需要满足行为主体、非法占有目的、秘密窃取行为、犯罪客体、入罪情节等要件,而盗窃罪的犯罪客体只能是刑法所保护的“公私财物”。因此,如果能够证明虚拟货币不是财物,就有望不判处盗窃罪,而判处非法获取计算机信息系统数据罪,从而减轻刑罚,本案中辩护律师就采取了这种策略。

对于虚拟货币能否被视为“财物”在司法实践中一直存在争议

1支持的理由

a.虚拟货币具有稀缺性

虚拟货币的稀缺性是客观的,加密货币往往宣布发行数量的上限,同时在技术上虚拟货币的任何更改都会通过特殊的、不可更改的哈希被记录在区块链当中,这使得每一枚虚拟货币都具有唯一性而非种类物。如果被盗,虚拟货币无法通过低成本的、中心化的手段被恢复,造成的损失是直接的。因此,虚拟货币作为盗窃罪的犯罪客体时,对被害人的侵害与一般的财物被盗类似。

b.虚拟货币具有财产价值

虚拟货币是具有价值与交换价值的特殊虚拟财产,而网络中的虚拟财产与现实生活中有形财产的区别仅在于存在的时空及形态不同,它们能够转化为现实财产,在财物性利益性方面不存在差别。

2反对的理由

a.虚拟货币物理属性上是数据

虚拟货币本质上是以二进制形式存在的一组计算机编码,这是不能忽视的客观属性。相反地,采取技术手段侵入计算机信息系统,超越授权范围来盗取计算机信息系统中的数据,盗取密钥转移虚拟货币,是典型的超越授权的侵入行为,可以被评价为侵入计算机信息系统。

b.我国政策性文件对虚拟货币持有和交易持严格限制态度

924通知已明确规定,虚拟货币相关业务活动属于非法金融活动,任何法人、非法人组织和自然人投资虚拟货币及相关衍生品,违背公序良俗的,相关民事法律行为无效,由此引发的损失由其自行承担。同时,对于涉虚拟货币的刑事案件,相关政策文件也往往密切关注,不认为虚拟货币为刑法保护的财物更符合政策需要。

本案裁判价值取向

本案辩护律师提出“虚拟货币并非刑法意义上的‘财物’”,因此本案不构成盗窃罪而仅构成非法获取计算机信息系统数据罪,法院没有对此进行正面回应,但是在裁判中认为“被告人以非法占有为目的,利用技术手段侵入他人计算机信息系统,秘密窃取他人虚拟币”,非法侵入他人计算机为盗窃的手段,虚拟货币为盗窃罪的犯罪客体,从这一角度看,本案实际上认可了虚拟货币的财物属性

由于924通知以来明确了虚拟货币的非法性,涉虚拟货币的民事案件也首先需要受到有效性的审查,在刑法中以虚拟货币为犯罪客体的案件也存在虚拟货币是否有保护必要性的质疑。这一案件认可了虚拟货币的财物价值,从盗窃罪的保护法益出发,用刑法保护了虚拟货币持有者的财产权益(尽管持有状态的合法与否会被另行评价),也对利用计算机信息技术实施盗窃的行为给予了否定性评价,抓住了盗窃是侵犯他人财产权益的犯罪的本质。

飒姐团队认为,涉虚拟货币案件的审理需要逐步规范化,虽然虚拟货币的非法状态使得司法实践存在分歧且具有政策性,但是大的趋势仍然是探索并明确围绕虚拟货币产生的民事纠纷、刑事犯罪的定性,保护当事人的合法权益,推进同案同判。虽然对于盗窃虚拟货币案件的定性仍然有争辩余地,但是这一案件妥善处理了被害人的权益保护和刑事政策对于虚拟货币的审慎态度,在未来,应当进一步规范化相关案件的审判思路。

写在最后

此外,这一案件也提示网络安全从业人员,应当遵守职业道德和法律底线,不应从事违法犯罪活动,“黑吃黑”也会受到法律的制裁。相关从业者应当协助执法机关打击网络犯罪,维护网络安全。Web3、网络安全等相关从业者拥有专业技能和知识,应当以正当的方式运用这些技能,保障网络安全和用户的隐私、数据安全、财产权益。利用网络安全技能进行非法活动的行为,不仅违反法律,更背离了职业道德,会受到法律的严惩。

Related Reads

Just now, DeepSeek V4 updates with DSpark, improving inference speed by 80%

DeepSeek has updated its DeepSeek V4 model with the DSpark speculative decoding framework, achieving a significant 60-85% speedup in generation for Flash models and 57-78% for Pro models while maintaining the same overall throughput. This engineering-focused update, rather than a core architectural change, introduces DSpark to address latency and throughput bottlenecks in high-concurrency production environments. DSpark combines high-throughput parallel generation with adaptive load-aware verification. Its key innovations include a semi-autoregressive generation architecture to model dependencies within token blocks and a hardware-aware confidence-scheduled verification system. This system uses a confidence head to predict token acceptance probabilities, allowing it to dynamically optimize verification length per request and allocate compute only to tokens with the highest expected payoff. The asynchronous scheduler is designed for real-world deployment, ensuring zero-overhead scheduling and continuous CUDA graph replay while preserving the target model's output distribution. In tests across mathematical reasoning, code generation, and daily dialogue, DSpark outperformed state-of-the-art models like Eagle3 and DFlash, increasing average acceptance length by 26.7%-30.9% and 16.3%-18.4% respectively on Qwen3 target models. DeepSeek also open-sourced DeepSpec, a full-stack codebase for training and evaluating speculative decoding draft models, providing a standardized toolkit that includes data preparation tools, model implementations, training code, and evaluation scripts.

marsbit1h ago

Just now, DeepSeek V4 updates with DSpark, improving inference speed by 80%

marsbit1h ago

BIT Research: The 2028 Halving Is Not the End, the Real Shake-Up of the Bitcoin Mining Industry Is Just Beginning

The Bitcoin mining industry is undergoing its most complex structural adjustment since inception. Despite Bitcoin's price holding near $61,000 and the network hash rate approaching a record 1 ZH/s, miner profitability is deteriorating. The industry is operating close to its breakeven point, with the 2028 halving expected to accelerate consolidation. The challenges extend beyond the halving's subsidy reduction; the industry's revenue model has yet to successfully transition towards a fee-driven structure. Increasingly, mining companies are evolving from simple Bitcoin producers into infrastructure and energy operators, including providers of AI/HPC computing power. Competition is shifting from pure hash rate expansion to business model upgrades. Economic pressure is evident. The theoretical daily mining revenue at current prices is around $78 million, yet the actual figure is only about $33 million—a 136% gap. Transaction fees remain low at roughly $220k daily, far below historical implied levels. With a current estimated industry-wide breakeven price near $65,000, mining alone is struggling to generate ideal profits. The 2028 halving is projected to push the fundamental production cost floor to approximately $93,289. This will likely accelerate a shift towards consolidation among larger, well-capitalized miners with diversified revenue streams. Competitive advantage will belong to institutionalized players with access to low-cost energy, AI/HPC hosting operations, and stronger balance sheets. In essence, Bitcoin mining is transitioning from a "mining business" to an "infrastructure business." Future profitability and resilience will depend less on block rewards and more on diversified income sources like energy management and computational infrastructure services. For investors, the key question is not the halving itself, but which miners can successfully navigate this business model transformation.

marsbit2h ago

BIT Research: The 2028 Halving Is Not the End, the Real Shake-Up of the Bitcoin Mining Industry Is Just Beginning

marsbit2h ago

This is How God Karpathy Uses Claude?

Andrej Karpathy, a prominent figure in AI, has reportedly joined Anthropic, leading to a noticeable decrease in his open-source contributions and social media activity. A document claiming to be his personal "CLAUDE.md" file—a set of instructions for the Claude AI to follow within a specific codebase—has been circulating online. While its authenticity is unverified, the content aligns closely with Karpathy's publicly shared principles on effective AI-assisted programming. The document outlines key rules for AI coding assistants, emphasizing the importance of reading existing code thoroughly before writing new code to maintain consistency. It advises against over-engineering, advocating for simple, surgical modifications that match the project's existing style. Other guidelines include clarifying assumptions upfront, writing meaningful tests, thoughtful debugging, and carefully considering dependencies. The core message is that these principles help prevent common AI coding failures, such as introducing unnecessary abstractions, style drift, or making invisible architectural decisions. The community has noted that even experts like Karpathy require detailed instructions to guide AI effectively, akin to managing a junior developer. A related GitHub repository, "andrej-karpathy-skills," which encapsulates these ideas, is reported to significantly reduce Claude's code error rate. Ultimately, the advice stresses that the best CLAUDE.md is tailored to one's own tech stack and coding practices.

marsbit2h ago

This is How God Karpathy Uses Claude?

marsbit2h ago

Trading

Spot
活动图片