Binance loses ~$6.3B in record crypto theft; TraderTraitor linked, DevOps laptop suspected as entry point
Binance disclosed a security incident affecting roughly $6.3 billion in cryptocurrency, described as the largest crypto theft ever. Its initial investigation points to a compromised DevOps engineer's laptop used to reach a service container and submit unauthorized withdrawals. TRM Labs and Chainalysis attribute the theft to TraderTraitor, a North Korean group tied to earlier crypto heists. Binance says about $3 billion has been frozen and it will cover all losses from its emergency fund and company funds. Binance.US was not affected.
Detalhes técnicos
- Binance reported no evidence of a wallet private key leak (update of October 30).
- Co-CEO Richard Teng told BleepingComputer the attacker did not simply use one engineer's permissions; the attack involved a more complex process, and investigators found additional breach points.
- TRM Labs estimates about $6.36 billion left Binance wallets across ten blockchains, most within about 20 minutes.
- Frozen and stolen totals from analysts differ and remain developing estimates.
Remediação
- Use only official Binance channels (app or support site you open yourself); ignore unexpected messages urging urgent verification or compensation claims.
- Review transaction history and security settings; contact official support to disable an account or reset password or 2FA if activity looks unfamiliar.
- Never share authentication codes.
- Be wary of fake crypto recovery services (FBI warning, 2023).
- Preserve evidence (messages, wallet addresses, transaction details) if you lose money to a related scam.
Linha do tempo
-
Binance loses ~$6.3B in record crypto theft; TraderTraitor linked, DevOps laptop suspected as entry point
ler a análise desta fonte ocultar
Binance disclosed a security incident affecting roughly $6.3 billion in cryptocurrency, described as the largest crypto theft ever. Its initial investigation points to a compromised DevOps engineer's laptop used to reach a service container and submit unauthorized withdrawals. TRM Labs and Chainalysis attribute the theft to TraderTraitor, a North Korean group tied to earlier crypto heists. Binance says about $3 billion has been frozen and it will cover all losses from its emergency fund and company funds. Binance.US was not affected.
Technical Details
- Binance reported no evidence of a wallet private key leak (update of October 30).
- Co-CEO Richard Teng told BleepingComputer the attacker did not simply use one engineer's permissions; the attack involved a more complex process, and investigators found additional breach points.
- TRM Labs estimates about $6.36 billion left Binance wallets across ten blockchains, most within about 20 minutes.
- Frozen and stolen totals from analysts differ and remain developing estimates.
Remediation
- Use only official Binance channels (app or support site you open yourself); ignore unexpected messages urging urgent verification or compensation claims.
- Review transaction history and security settings; contact official support to disable an account or reset password or 2FA if activity looks unfamiliar.
- Never share authentication codes.
- Be wary of fake crypto recovery services (FBI warning, 2023).
- Preserve evidence (messages, wallet addresses, transaction details) if you lose money to a related scam.