Ethical Hacking News
A $6.3 billion attack on Binance, one of the largest cryptocurrency exchanges in the world, has highlighted the ongoing threat of state-sponsored hacking and the importance of robust security measures in the digital economy. The attack, attributed to North Korea, is considered the largest crypto theft on record, surpassing the $1.5 billion Bybit hack of February 2025. Binance has taken steps to mitigate the damage, suspending deposits and withdrawals and beginning work with blockchain analysis firms and law enforcement to track the stolen funds. The incident underscores the importance of prioritizing security and taking proactive steps to protect against cyberattacks.
$6.3 billion was stolen from Binance, one of the largest cryptocurrency exchanges in the world, in a state-sponsored hacking attack attributed to North Korea. The attack is believed to have started with a compromised DevOps engineer's laptop, allowing the attacker to access a service container and submit unauthorized withdrawal transactions. Binance has taken steps to mitigate the damage, including suspending deposits and withdrawals, cancelling affected permissions, and working with blockchain analysis firms and law enforcement to track the stolen funds. The attack highlights the importance of robust security measures, the need for companies to prioritize the safety of their customers' funds, and the ongoing threat of state-sponsored hacking.
The cryptocurrency market experienced a significant shake-up recently, with $6.3 billion stolen from Binance, one of the largest and most popular cryptocurrency exchanges in the world. The attack, attributed to North Korea, highlights the ongoing threat of state-sponsored hacking and the importance of robust security measures in the digital economy.
According to a report by The Block, blockchain analyst Spreek identified approximately $3.55 billion in incoming transfers to an initially unidentified wallet, which was later attributed to a North Korean state-backed unit known as TraderTraitor, part of the Lazarus Group and APT38. This attack is considered the largest crypto theft on record, surpassing the $1.5 billion Bybit hack of February 2025.
The attack is believed to have started with a compromised DevOps engineer's laptop, which gave the attacker access to a service container and allowed them to submit unauthorized withdrawal transactions. Binance has stated that it has found no evidence that attackers stole any wallet private keys, but rather, they used access from an engineer’s laptop to reach a service container and send unauthorized withdrawal requests.
The company has taken steps to mitigate the damage, suspending deposits and withdrawals to carry out security checks, cancelling the permissions linked to the affected address, and beginning work with blockchain analysis firms and law enforcement to track the stolen funds. Binance has also committed to covering all losses using its SAFU fund and its own money, and plans to publish an updated Proof of Reserves once it has completed the recovery work.
The attack highlights the importance of robust security measures and the need for companies to prioritize the safety of their customers' funds. It also underscores the ongoing threat of state-sponsored hacking and the need for international cooperation to combat these threats.
In addition to the attack on Binance, other cybersecurity incidents have been reported in recent days, including a data breach at Homeland Security that exposed the personal data of over 40,000 employees, and a hacking incident that targeted the IT systems of several major companies.
These incidents demonstrate the ongoing threat of cyberattacks and the need for companies to stay vigilant and take proactive steps to protect themselves. By prioritizing security and taking steps to prevent and respond to incidents, companies can reduce the risk of a successful attack and minimize the impact on their customers and stakeholders.
Furthermore, the incident highlights the importance of blockchain transparency and the need for companies to be transparent about their security measures and incident response processes. While blockchain transparency does not guarantee operational security, it can provide valuable insights into the nature of an attack and help companies to identify vulnerabilities and improve their security posture.
In conclusion, the recent attack on Binance is a reminder of the ongoing threat of state-sponsored hacking and the importance of robust security measures in the digital economy. By prioritizing security, staying vigilant, and taking proactive steps to protect themselves, companies can reduce the risk of a successful attack and minimize the impact on their customers and stakeholders.
Related Information:
https://www.ethicalhackingnews.com/articles/63-Billion-Stolen-from-Binance-in-Attack-Attributed-to-North-Korea-ehn.shtml
https://securityaffairs.com/202119/cyber-crime/6-3-billion-stolen-from-binance-in-attack-attributed-to-north-korea.html
Published: Fri Oct 30 17:32:51 2026 by llama3.2 3B Q4_K_M
