Cryptocurrency platform Binance said Friday it was working to resolve a “complex attack” that hit around $6.3 billion in funds, with about half that amount frozen to prevent a massive theft.
asserted
amount → say → theft
The company — the world’s largest crypto exchange by daily trading volumes — said investigations had “uncovered additional points of breach”, contrary to initial findings that suggested the hack involved a single compromised laptop.
uncertain
hack → say → laptop
“This was a complex attack, and we are doing all we can in coordination with law enforcement to resolve it,” Binance wrote on X.
The firm earlier posted a series of sometimes contradictory messages, insisting that “user funds are completely safe” but also saying it would “cover all losses.
asserted
it → do → losses
The company confirmed on its X account for Latin America that “the total estimated impact is around $6.3 billion.”
That is four times the amount impacted in the biggest-ever cyberattack of its kind to date: $1.5 billion taken in February last year from the Bybit platform.
asserted
That → confirm → platform
Binance warned the figure “may continue to increase as our teams work closely with law enforcement, issuers, blockchain intelligence firms and industry partners to trace and freeze additional assets.”
uncertain
teams → warn → assets
It said around $3 billion in affected assets had been frozen.
asserted
billion → say → assets
The 2023 Bybit heist was attributed at the time to a group of hackers affiliated with North Korea called TraderTraitor.
asserted
heist → attribute → Korea
Blockchain investigation firm TRM Labs said Thursday it had “high confidence” that the Binance hack was also orchestrated by TraderTraitor, citing “robust on and off-chain intelligence.”
asserted
hack → say → intelligence
“Several features of this attack match earlier North Korea-linked heists,” TRM said.
asserted
TRM → match → heists
TraderTraitor is believed to be part of Lazarus Group – which gained notoriety in 2014 when it was accused of hacking into Sony Pictures as revenge for “The Interview,” a film that mocked North Korean leader Kim Jong Un.
asserted
that → believe → Un
At about 0900 GMT Friday, Binance said it was on track to resume withdrawals in 45 hours, after announcing earlier that all deposits and withdrawals had been “temporarily suspended”.
asserted
deposits → say → hours
“Deposits remain unaffected,” it said.
asserted
it → remain → ?
The company had said on X that initial investigation suggested the hack involved a compromised laptop belonging to a “DevOps engineer,” allowing the unauthorised party to access a “service container” and execute unauthorised withdrawal transactions.
uncertain
party → say → transactions
“We have found no evidence of any private key leaks from wallets,” it said, promising to share a detailed technical analysis once investigations were complete.
asserted
investigations → find → analysis
But it said later that “subsequent investigation has uncovered additional points of breach.”
asserted
investigation → say → breach
Paolo Ardoino, the boss of Tether — a company that issues a cryptocurrency known as USDT — said his firm froze about $1.6 billion “related to a potential Binance exchange hack.”
asserted
firm → issue → hack
Jeremy Allaire, who runs cryptocurrency platform Circle, said his company had frozen more than $800 million in USDC.
asserted
company → run → USDC
USDT and USDC are both “stablecoins” or digital currencies whose value is linked to a traditional currency, the US dollar.
asserted
value → link → currency
The US Department of Justice and the FBI did not immediately respond to requests for comment.
asserted
Department → respond → comment
Crypto prices tumble
For several hours before Binance confirmed the attack, industry observers said hackers had managed to reach the platform.
asserted
hackers → tumble → platform
The prices of most major cryptocurrencies fell on news of the cyberattack, except for the stablecoins, which by definition can only fluctuate within tight margins.
asserted
which → fall → margins
Bitcoin and Ethereum plunged nearly 5 per cent and nearly 6pc respectively on the news.
asserted
Bitcoin → plunge → news
BNB, native to Binance, tumbled nearly 10pc.
asserted
BNB → tumble → Binance
The attack on Binance comes as many observers express worries that the ever-expanding capabilities of artificial intelligence (AI) models could compromise cryptography and IT security protocols.
uncertain
capabilities → come → cryptography
Binance has secure asset fund
Binance runs a secure asset fund for users, which is a reserve held entirely in bitcoin that is intended to protect user assets in cases of security breaches, according to its website.
uncertain
that → have → website
“It’s becoming very hard to counter hacks as AI can find vulnerabilities faster than you can fix them,” said Bernardo Brites, CEO of Trace Finance, a payments and stablecoin infrastructure company.
asserted
Brites → become → Finance
“My view is that users will move away from smaller and medium-sized exchanges, (it is) becoming too risky to park your money somewhere that couldn’t cover a hack of meaningful size.”
asserted
that → move → size
World Liberty Financial, a crypto company linked to US President Donald Trump and his family, said on Thursday it had worked with cryptocurrency custodian BitGo to freeze funds stolen in what it described as a Binance hack.
asserted
it → link → hack
Binance’s Yi said $27 million in stablecoins and about $2 million worth of World Liberty tokens had been frozen.
asserted
million → say → tokens
Crypto firm Ripple also froze roughly $200 million in funds, Yi said.
asserted
Yi → freeze → funds
Jack McDonald, senior vice president of stablecoins at Ripple, said the company was closely monitoring reports of a potential exploit involving Binance and was freezing affected funds and coordinating with relevant parties.
asserted
company → say → parties
Incident adds to string of crypto thefts
The incident adds to a string of crypto thefts.
asserted
incident → add → thefts
Last year, attackers stole $2.9 billion worth of cryptocurrency across nearly 150 attacks, according to researchers at TRM Labs.
uncertain
attackers → steal → Labs
In September, cryptocurrency exchange Bitget said roughly $350 million in crypto had been stolen from its platform, underscoring the industry’s vulnerability to hackers.
asserted
million → say → hackers
Authorities have warned that organised crime groups are increasingly using cryptocurrencies to move funds across borders outside the traditional financial system.
asserted
groups → warn → system
Binance.US, a separate cryptocurrency exchange, said it was not affected by the security incident.
asserted
it → say → incident
Coinbase said it was unaffected and was monitoring the situation.
asserted
it → say → situation
In an unrelated incident earlier on Thursday, prediction market operator Polymarket temporarily halted trading after a security incident involving a third-party provider.
asserted
Polymarket → halt → provider
It later resumed trading and said it would fully reimburse affected traders.
asserted
it → resume → traders
The Aporia
