Key Takeaways
- • Binance suffered a record $6.3 billion hack on Thursday, with analysts blaming North Korea, prompting rival exchanges to tighten their defenses and call for industry-wide information-sharing.
- • Binance halted withdrawals and said it would use company funds to cover the losses, with co-CEO Richard Teng saying the attack may have begun with a compromised software engineer's laptop.
- • Tether froze nearly $1.57 billion and Circle froze $800 million in assets linked to the hack, while Bitcoin and ether cannot be frozen because no single entity controls them.
- • Coinbase adjusted systems that store cryptocurrency keys offline, and Kraken is monitoring industry incidents for lessons, as executives expressed confidence the hack would not cause material broader losses.
- • OKX CEO Star Xu called for a real-time alert system to let exchanges share hack information immediately and temporarily freeze suspected stolen funds.
Summary
Crypto exchanges are moving quickly to strengthen their defenses and pushing for greater information-sharing across the industry after a record $6.3 billion hack of Binance, the world's largest crypto exchange, according to Reuters. The attack, which unfolded in roughly 20 minutes late on Thursday, exposed the sector's vulnerability just as digital assets become more embedded in mainstream finance under President Donald Trump's regulators, who are promoting deeper integration of digital assets into the financial system.
Binance halted withdrawals after the attack, which analysts blamed on North Korea. The company said it would use company funds to cover the losses. Co-CEO Richard Teng said on X that the "complex attack" may have begun with a compromised software engineer's laptop, giving hackers access to systems used to process withdrawals. Binance later found additional breaches, and software designed to erase traces of the attack hampered the investigation. Social engineering, a tactic in which hackers trick victims into revealing sensitive information or granting access, may have been involved in compromising the laptop, security experts said. Harry Donnelly, CEO of Circuit, said companies are planning more employee training to guard against such attacks. The bulk of the heist bore similarities to previous attacks blamed on North Korea, according to blockchain analysis firms TRM Labs and Chainalysis. North Korea routinely denies involvement in crypto thefts, and its mission in Geneva did not respond to requests for comment.
Rival exchanges moved on Friday to shore up their systems and reassure customers that their tokens were safe. Coinbase said it made adjustments to its systems that store cryptocurrency keys offline "solely out of an abundance of caution," and Kraken said it was monitoring industry incidents for lessons it could apply. A Kraken spokesperson said its full-time teams look for potential vulnerabilities every day. Chris Perkins, Franklin Templeton's head of crypto, said "the security situation must be addressed immediately" for crypto to reach its full potential.
The hackers sought to launder the funds quickly before detection and freezes. Tether said it had frozen nearly $1.57 billion linked to Binance, and Circle said it froze $800 million. Chainalysis said the hackers appeared to be using sophisticated laundering patterns it had not seen before. Bitcoin fell more than 4% and ether fell more than 5% on Thursday, though both recovered some ground on Friday. Josh Riezman, chief legal and strategy officer at GSR, said he expected the industry at large would not suffer material losses, though Binance would have to deal with the exploit directly.
On Friday, some exchange executives called for a coordinated hack detection system. OKX CEO Star Xu said in a post on X that the industry needs "a real-time alert system that allows participants to share information immediately when a hack occurs, coordinate a rapid response, and temporarily freeze suspected stolen funds." Riezman said the Binance hack could be a catalyst for industry improvement as traditional finance and digital assets converge.
Binance halted withdrawals after the attack, which analysts blamed on North Korea. The company said it would use company funds to cover the losses. Co-CEO Richard Teng said on X that the "complex attack" may have begun with a compromised software engineer's laptop, giving hackers access to systems used to process withdrawals. Binance later found additional breaches, and software designed to erase traces of the attack hampered the investigation. Social engineering, a tactic in which hackers trick victims into revealing sensitive information or granting access, may have been involved in compromising the laptop, security experts said. Harry Donnelly, CEO of Circuit, said companies are planning more employee training to guard against such attacks. The bulk of the heist bore similarities to previous attacks blamed on North Korea, according to blockchain analysis firms TRM Labs and Chainalysis. North Korea routinely denies involvement in crypto thefts, and its mission in Geneva did not respond to requests for comment.
Rival exchanges moved on Friday to shore up their systems and reassure customers that their tokens were safe. Coinbase said it made adjustments to its systems that store cryptocurrency keys offline "solely out of an abundance of caution," and Kraken said it was monitoring industry incidents for lessons it could apply. A Kraken spokesperson said its full-time teams look for potential vulnerabilities every day. Chris Perkins, Franklin Templeton's head of crypto, said "the security situation must be addressed immediately" for crypto to reach its full potential.
The hackers sought to launder the funds quickly before detection and freezes. Tether said it had frozen nearly $1.57 billion linked to Binance, and Circle said it froze $800 million. Chainalysis said the hackers appeared to be using sophisticated laundering patterns it had not seen before. Bitcoin fell more than 4% and ether fell more than 5% on Thursday, though both recovered some ground on Friday. Josh Riezman, chief legal and strategy officer at GSR, said he expected the industry at large would not suffer material losses, though Binance would have to deal with the exploit directly.
On Friday, some exchange executives called for a coordinated hack detection system. OKX CEO Star Xu said in a post on X that the industry needs "a real-time alert system that allows participants to share information immediately when a hack occurs, coordinate a rapid response, and temporarily freeze suspected stolen funds." Riezman said the Binance hack could be a catalyst for industry improvement as traditional finance and digital assets converge.
Go deeper than the headline
Research every firm in this story, track the ones that matter and get the daily briefing — free for 7 days.