Binance, the world's largest cryptocurrency exchange by trading volume, is investigating a significant security breach that may have resulted in $6.3 billion in losses. According to the exchange, attackers exploited a compromised employee device to execute unauthorized withdrawals. The incident is being considered one of the largest cryptocurrency thefts on record. Binance has initiated an investigation into the breach.
The breach is believed to have started with a compromised laptop belonging to a DevOps engineer. This may have allowed attackers to access a service container and submit unauthorized withdrawal transactions. Blockchain intelligence firms have attributed the attack to TraderTraitor, a North Korean hacking operation linked to the Lazarus Group. The FBI has also attributed responsibility to North Korea and TraderTraitor.
The group responsible for the attack has previously been associated with major cryptocurrency thefts targeting exchanges and blockchain platforms. Despite the severity of the breach, Binance stated that it found no evidence that wallet private keys were exposed. The exchange estimated the total financial impact at approximately $6.3 billion.
In response to the breach, Binance has worked with blockchain partners, including stablecoin issuers Tether and Circle, to freeze approximately $3 billion of the affected assets. This represents nearly half of the estimated losses. The exchange has pledged to absorb all losses using its Secure Asset Fund for Users (SAFU) and corporate funds, ensuring that customer balances remain protected.
As an immediate response to the breach, Binance temporarily suspended deposits and withdrawals while conducting security checks. The exchange also revoked the affected address authorization and engaged law enforcement and blockchain intelligence firms to trace and recover the stolen funds. This incident raises fresh questions about the security of cryptocurrency exchanges.
The incident highlights the risks posed by compromised employee devices and privileged access to internal infrastructure. Binance has pledged to work with law enforcement to identify those responsible and pursue the recovery of the stolen assets. The exchange will publish a detailed technical post-mortem after completing its investigation.
The incident had an immediate impact on the cryptocurrency market, with Bitcoin falling below $77,000 and Ethereum dropping under $2,200. Binance will release an updated Proof of Reserves once remediation work is finished.
Key points
- North Korean hackers are suspected to be behind the $6.3 billion crypto theft.
- Binance has pledged to absorb all losses using its Secure Asset Fund for Users (SAFU) and corporate funds.
- The incident raises questions about the security of cryptocurrency exchanges.
