Binance Suffers Security Breach Affecting $6.3 Billion in Assets, Nearly $3 Billion Frozen
Summary: Binance reported a security incident affecting about $6.3 billion in assets, with roughly $3 billion frozen on-chain so far, after an attacker it says may have started with a compromised DevOps engineer's laptop gained access to a service container and submitted unauthorized withdrawals. Chainalysis estimated about $5.912 billion was stolen at the time of theft, and TRM Labs and Chainalysis attributed the hack to North Korea with high confidence, linking it to TraderTraitor, the group behind the 2025 Bybit heist.
Why it matters: Elliptic's Tom Robinson said the attacker got Binance's own systems to sign transactions on its behalf rather than stealing private keys, and that the day before the attack the wallet was funded through Tornado Cash and the code tested on three wallets, none of which would have stood out at the time. With the attacker still holding more than 420,000 ETH and 18,270 BTC worth about $2.4 billion, the lesson is that one compromised laptop and the infrastructure around the keys, not the cryptography, is where a nine-figure loss begins.
Read the original at The Hacker News ↗
- Topics
- Cybercrime & Law Enforcement
- Related
- Gootloader Malware Disrupted After Infecting 25,000 Computers Cyber Risks · Nov 13, 2026354 dark web vendors and buyers arrested in Operation Tor Nado Cyber Risks · Nov 13, 2026Law Enforcement Disrupts Gootloader, CastleRAT, and StealC Infrastructure Cyber Risks · Nov 13, 2026