Overview
- Security firms say attackers moved roughly $6.36 billion from Binance wallets across ten blockchains in a rapid operation that moved most funds in about 20 minutes.
- Binance paused deposits and withdrawals and worked with blockchain firms and issuers to trace funds, with partners such as Tether and Circle freezing about $1.57 billion and more than $800 million respectively for a total of roughly $3 billion secured.
- Preliminary Binance findings point to a compromised DevOps or engineer laptop that gave access to a service container and allowed unauthorized withdrawal commands to run.
- TRM Labs and multiple analysts attribute the operation to a North Korea-linked group called TraderTraitor, while Binance says user balances are safe and that the company will cover losses from its reserves and funds.
- The theft shook crypto markets, raised questions about custodial risk at centralized exchanges and could spur tougher rules and tighter operational controls because on-chain tracing can locate tokens but does not guarantee full recovery.