Binance, the world’s largest cryptocurrency exchange, lost about $6.3 billion in what is reported to be the largest crypto theft on record. Blockchain analysis firms TRM Labs and Chainalysis attributed it to North Korea’s TraderTraitor group.
What happened
- On 29 October, starting at about 20:05 UTC, an attacker moved roughly $6.36 billion out of Binance wallets on ten blockchains, most of it within 20 minutes, according to TRM Labs.
- Binance said its initial investigation suggests the attack began with a compromised DevOps engineer’s laptop, which gave access to a service container used to submit unauthorised withdrawals. It later said it had found further points of breach.
- Industry partners froze close to $3 billion, and Binance said it would cover all losses.
- The FBI said it was coordinating with partners; Binance has not named a threat actor.
Why it mattered
One compromised engineer’s laptop was enough to reach systems that could move billions within minutes, at an exchange that holds assets for millions of customers.
Lessons for organisations
Treat administrator and DevOps devices as high-value targets: harden them, separate privileged access from everyday work, and require independent approval for high-value or unusual transactions. TraderTraitor is known for fake recruiter approaches to engineers, so include them in awareness training.
Source: BleepingComputer
Part of our Top stories archive of headline-making events in information security, privacy, and AI. If you would like help applying the lessons to your organisation, contact us.
